What do you have to look up?

The date a domain was registered and the company it was bought through. A site set up last month that claims years of history is a red flag.

Old copies of the site. Shows how long it has existed and what it used to say, or that it has no history at all.

A second view of the same public registration record.

Security certificates issued for the domain. Often turns up other domains made by the same people.

Where the site is hosted, and its address records.

The domain's email settings, and whether its mail server is on a spam list.

A screenshot of the page, where it redirects, and the servers it talks to.

Search for existing scans first. A new scan is public, and the scammer can see it.

Whether security companies have flagged the link.

What you submit is shared with security companies. Never upload files with personal information.

Where a shortened link really ends up.

Whether Chrome and other browsers already warn people about the site.

A rough trust score for a website. Treat it as a hint, not proof.

Other places the same photo appears, such as a stolen profile picture or stock photo.

Pages that used this exact image, and when it first appeared.

Often finds matches the others miss, especially faces.

Another reverse image search. Each one finds different matches.

Hidden details saved with a photo, such as the camera, time and place. Photos from social apps usually have these removed.

Only upload pictures taken from the scam, never photos of you or people you know.

Search the exact number, email or username inside quotes. Look for other people's reports and the same details on other sites. Try a second search engine too.

Whether an email address appeared in a known data breach.

The name linked to a U.S. phone number.

Use the name lookup only. Never call, text or message a number from a case.

Whether the wallet has already been reported in a scam.

Payments in and out of a wallet, for Bitcoin and many other coins.

Ethereum and tokens on it. Addresses start with 0x.

Bitcoin. Addresses start with 1, 3 or bc1.

TRON. Addresses start with T and are common in USDT scams.

Whether a U.S. charity is registered as tax-exempt, and its filings.

Company registrations from many countries: whether a name is registered, where and when.

Profiles and tax filings for U.S. nonprofits, including who runs them and what they spend.

Ratings for U.S. charities. Small or new charities often aren't listed, which is normal.

Whether a charity is registered in England and Wales.

Whether a person or firm selling investments is licensed in the U.S.

Scams other people have written up, searchable by domain or phone number.

More free checkers from the group that runs Scam Search Party.