Cybersecurity Reach Foundation
501(c)(3) · EIN 99-4835568 · Tax-deductible

Someone is about to click the link.Help us answer them first.

Every month, more than 30,000 people paste a suspicious link, forward a strange email, or message us on WhatsApp to ask one simple question: is this real? We answer, free, in plain language, with no account and no catch.

Nobody here is paid, and the tools we build are given away. What nobody donates is the running cost of the machines behind them. Every amount helps — a small donation goes an unreasonably long way.

100% volunteer-run No salaries, ever Member, Global Anti-Scam Alliance

Give any amount

Monthly or one-time. Takes under a minute.

Secure giving via Givebutter · Tax-deductible receipt emailed instantly

30,000+

People helped every month

Free answers on suspicious links, emails, and messages

5.7M

Campaign impressions

Scam warnings on NYC street kiosks across nine campaigns

$0

Amount we charge

No paywalls, no accounts, no upsell, no data sold

100%

Volunteer-run

No salaries. Your donation pays for machines, not people

Where the money goes

The expensive parts are already donated.

Google gives us $10,000 a month in search advertising. LinkNYC gives us kiosk space across Manhattan for nothing. Every researcher, investigator, writer, and engineer here is a volunteer.

What nobody donates is the unglamorous part — the servers and services that actually answer a person at 11pm who is frightened about an email. That is the gap you fill.

Servers and APIs

The machines behind every check, scan, and reply. This is where most of what you give goes.

Original research

The data sources our investigators use to find a scam campaign before it reaches the people we are trying to protect.

Spanish, and beyond

Translation and review, so guidance is right and not merely readable. A scam warning only works in a language you think in.

Getting into the room

Printed posters and handouts for schools, libraries, and community groups, plus the cost of running the workshops themselves.

There is no suggested amount, because there is no wrong one.

We are not going to tell you that $25 saves a specific number of people — we would be making that up, and this is an organisation whose whole value rests on not making things up. What is true is simpler: our costs are small, our reach is not, and every dollar lands on the running costs directly. A few dollars a month from enough people keeps all of this free indefinitely.

This is the work

Tools reach the people who go looking. Rooms reach the people who don't.

So we do both — a workshop at a college in New York, a session for educators in Panama, a warning on a street kiosk that somebody reads while waiting for the light to change.

A Cybersecurity Reach Foundation volunteer points at a slide explaining how Tor works, in front of a full classroom of university students
A dark web workshop for the ISACA student chapter at Baruch College, New York.
Six people standing beside a Cybersecurity Reach Foundation banner reading Seguridad Digital Para Todos in a classroom at Fundación JUPÁ
Fundación JUPÁ, Panama — training educators so they can teach scam awareness themselves.
A volunteer presents a Spanish-language slide explaining the forms phishing takes, beside a Digital Security For All banner
Office scam awareness in Panama, delivered in Spanish. Phishing is one trick with many shapes.
Students sitting with open laptops, listening during a Cybersecurity Reach Foundation session
A Scam Search Party: volunteers trace real scams and write up what they find.
A LinkNYC street kiosk on a Manhattan corner displaying a Cybersecurity Reach Foundation advert reading Free Tools, Clear Guidance, Digital Protection for All
Nine campaigns on NYC kiosks. 5.7 million impressions. $0 paid for the space.
A volunteer speaking to seated staff in an office meeting room, with a Spanish-language scam awareness slide on the screen behind her
Staff learning the one habit that stops most of it: pause, then verify on a channel you trust.
Three Cybersecurity Reach Foundation volunteers briefing a room at the start of a session
Volunteers setting up a session. Everyone in this photo does this in their own time.

Other ways to give

A few of these are worth more than cash.

Give monthly

The single most useful thing you can do. $5 a month, reliably, is worth more to us than $60 once, because it is the difference between hoping a service stays up and knowing it will. Choose monthly in the form above.

Ask your employer to match

Most matching programs accept 501(c)(3) nonprofits, and it doubles or triples your gift for five minutes of your time. They will ask for our EIN: 99-4835568. Email info@cybersecurityreach.org and we will deal with the forms.

Stock, crypto, or a DAF

Often materially better for you at tax time than giving cash. Email info@cybersecurityreach.org and we will send you what you need.

Not in a position to give? That is completely fine, and there is something else you can do that costs nothing: send one of our alerts to the person in your life most likely to be targeted. See the current alerts · Or volunteer with us

Questions, answered

Is my donation tax-deductible?+

Yes. Cybersecurity Reach Foundation is a registered 501(c)(3) nonprofit, EIN 99-4835568. A receipt for your records is emailed immediately after you give.

Where exactly does my money go?+

Servers, APIs, and databases — the machines that answer people. Keeping those running is the first call on every donation, and it is genuinely what it takes to run every tool on this page. Anything beyond it funds original scam research, translation into Spanish, printed materials for partner schools and community groups, and workshops. Nobody at CSRF draws a salary, so none of it goes to staff. Every amount helps, whatever size it is.

How do you do so much with so little?+

The expensive parts are donated. Google gives us $10,000 a month in search advertising through the Ad Grant. LinkNYC gives us kiosk space at no cost. Every researcher, investigator, and engineer is a volunteer. Your donation covers the one thing nobody donates: the running costs of the infrastructure. Every amount helps.

How do I know the numbers on this page are real?+

The monthly figure comes from our own impact system and is the same number we report internally and to partner organisations. The 5.7 million is campaign impressions from the LinkNYC delivery reports — that is ad views, not people helped, and we are deliberately careful not to describe it as anything else. If a figure here matters to your decision, email us and we will show you where it comes from.

Can I set up a monthly donation?+

Yes, and it is the most useful thing you can do. A predictable $10 a month is worth more to us than an unpredictable $120, because it lets us commit to keeping a service running. Choose the monthly option in the form. Pause or cancel any time.

Does my employer match donations?+

Many do, and it is the fastest way to double your gift. Ask your HR team — most matching programs accept 501(c)(3) nonprofits, and they will ask for our EIN, which is 99-4835568. Email info@cybersecurityreach.org and we will handle the paperwork with them.

Can I donate stock, crypto, or through a donor-advised fund?+

Yes. These are often more tax-efficient for you than cash. Email info@cybersecurityreach.org and we will set it up.

The next person to ask us “is this real?” is about ninety seconds away.

They will get a clear answer, for free, because someone covered the running costs that month. Thank you for being one of those people.

Cybersecurity Reach Foundation is a 501(c)(3) nonprofit, EIN 99-4835568. Questions about giving? info@cybersecurityreach.org

Give any amount

Monthly or one-time. Takes under a minute.

Secure giving via Givebutter · Tax-deductible receipt emailed instantly