How we investigate
Scam reporting earns trust by showing its work. Here is ours.
1. Primary sources first
Every alert traces to law-enforcement bulletins, court filings, bank fraud reports, or firsthand victim accounts — never to viral posts alone. If we cannot source it, we do not publish it.
2. Technical reproduction
Where tools are publicly available, we test the claimed technique ourselves to separate working attacks from hype. When we cannot reproduce something, the alert says so.
3. Defense before fear
Every alert leads with what to do, not what to dread. Scare-first reporting gets shares; defense-first reporting prevents losses. We optimize for the second.
4. Dated and updated
Scam techniques evolve monthly. Every alert carries its updated date, and retired techniques are marked retired — not deleted, so old references still resolve to truth.
5. No security theater
We do not recommend products that do not help, and security-tool links are plain links unless a paid relationship exists and is labeled. Fear is not a sales funnel here.