Start with what they actually have. Someone who has already lost money needs local support first, not a checker.
What you have, and what to do next
| What someone has | Suggested next step |
|---|---|
| A suspicious email | InboxSpotter, at inboxspotter.com |
| A suspicious text or chat message | CyberScout, at cyberscout.chat |
| A suspicious link or website | The CSRF checker, at cybersecurityreach.org/check |
| Wants to look up a known scam pattern | ScamArchive, at scamarchive.org |
| Wants browser protection | KnownGood |
| Lost money or shared sensitive information | Your organization's established recovery and reporting pathway, first |
How to use this page
- Do not send everyone to the same place.
- Lost money or shared ID documents? Local support and reporting come first.
- Check watchout.report before a workshop or a newsletter.
Draft note for CSRF review: confirm the public address for KnownGood, and confirm CyberScout and the CSRF checker are the addresses we want partners printing.