earlyink
122 first flagged15 Oct 2026

Scam Second Opinion: on-device check of suspicious chats and screenshots

Browser extension and phone app that judge suspicious messages locally with small models. Worried families pay.

Crowded · Gemma scam model, 35B on-phone VLM

Written for: Solo builder

Next step

Build a WhatsApp Web extension this week that sends the visible thread to a local Gemma model through WebGPU or Ollama, test it on 30 public scam transcripts, and recruit testers in r/Scams and caregiver Facebook groups.

Why now

Fraud costs keep rising: 89% of card issuers are expanding AI fraud tools, and Apate is sending agents undercover to collect scam scripts. Consumers still have nothing private to check a WhatsApp thread with before they send money. On-device models remove the 'I'm not uploading my mum's messages' objection, and an open-source local app like Private Mind proves the distribution path.

What became possible

Google DeepMind and GovTech Singapore showed lightweight on-device Gemma models catching conversational scams in private chats with zero cloud egress. MiniCPM-V 4.7 runs a 35B-A3B vision-language model in about 3GB on a phone, so it can read screenshots of chats locally.

Two ways in

  1. Second Opinion extension

    Chrome extension for WhatsApp Web, Messenger, Gmail and LinkedIn that runs a small local model over the open conversation. It flags scam patterns such as urgency, payment-method switching and secrecy requests, with a plain explanation.

    Customer
    Adults protecting older parents; small-business owners targeted by invoice scams
    Model
    Free single user; $4 a month family plan covering 5 devices
  2. Screenshot check app

    Share a chat screenshot to the app, and an on-device VLM reads it and returns a risk verdict with reasons

    Customer
    Same families on iOS and Android
    Model
    Included in the family plan

Competition

Crowded

Both product ideas already exist. The screenshot checker is well covered: Norton Genie, Bitdefender Scamio, Malwarebytes Scam Guard, Nomorobo and many indie apps already let you upload a screenshot and get a risk verdict with reasons, most of them free.

Full competition notes (11 competitors)

Both product ideas already exist. The screenshot checker is well covered: Norton Genie, Bitdefender Scamio, Malwarebytes Scam Guard, Nomorobo and many indie apps already let you upload a screenshot and get a risk verdict with reasons, most of them free. The extension idea is matched almost feature for feature by ScamBrake, which claims local-first detection on Gmail, WhatsApp Web and Messenger, flags urgency and money requests, and is free. Google is also adding free on-device Gemini Nano scam detection directly to Chrome and Android. Being on-device is the one real difference from the security-suite apps, but it is not enough to win. Buyers rarely choose based on it, Google already gives it away, and small local models are noticeably less accurate than cloud models on slow-building pig-butchering or romance conversations. Families will take a free, good-enough option from a brand they know. A new entrant could still find room in a few narrower places. First, LinkedIn and recruiting or job-offer scams, where the existing tools don't clearly offer coverage. Second, small-business invoice and payment-change fraud inside Gmail: a lightweight check aimed at sole traders, who can't afford enterprise email-security tools, that notices when bank details change compared with earlier threads with the same vendor. Third, a caregiver product built around family workflow rather than the detector. That would mean an adult child receives a privacy-preserving alert, such as "Mom is being asked to pay by gift card," without the parent's messages leaving the device, plus a one-tap "call me before you pay" step. OnGuardAI does this for phone calls and Scam Alarm does a basic email version, but nobody clearly owns it across chat apps. Even in these niches, distribution is the hard part, because antivirus vendors and Google can copy any feature that gets traction.

  • ScamBrake

    This is almost exactly the Second Opinion extension idea. It is a browser extension that works on Gmail, Outlook, Yahoo, ProtonMail, WhatsApp Web, Facebook Messenger and Facebook posts. It looks for urgency, money requests, impersonation and suspicious links, and shows a warning banner inside the chat or inbox. Its listing says detection runs locally and is free, with an optional AI second opinion that needs an account. All of these claims come from the vendor.

  • Norton Genie AI Scam Detector

    A free iOS, Android and web tool from Gen Digital. You paste text or upload a screenshot and get a verdict with reasons, which is the same thing the screenshot app would do. Analysis happens in the cloud, not on the device. Reviewers found it strong on delivery and gift-card scams and weaker on slow-building conversational scams.

  • Google Chrome / Android on-device scam detection (Gemini Nano)

    Since Chrome 137, Chrome uses Gemini Nano on the device to detect tech-support scam pages for users in Enhanced Protection mode. Google has also brought on-device AI warnings to Android notifications and Messages. This is a free, built-in version of the 'small local model' approach, but it covers web pages and SMS, not WhatsApp Web, LinkedIn or Gmail conversations.

  • Bitdefender Scamio

    A free scam-checking chatbot that reaches people where they already are, including WhatsApp, Messenger, Discord and the web. Users forward messages, links, QR codes or screenshots and get a verdict. It runs in the cloud.

  • Malwarebytes Scam Guard

    An AI assistant for checking suspicious texts, emails, links and screenshots, available on Windows, Mac, iOS and Android. Malwarebytes' own pages disagree on whether it is free or part of Premium. It runs in the cloud.

  • McAfee Scam Detector

    Scam detection for texts, email and links, now included in every McAfee antivirus plan. It is aimed squarely at the same worried consumers and families.

  • Scam Alarm (Chrome extension)

    A small Chrome extension that uses AI to scan opened emails and alerts a designated parent or caregiver by email when it flags a dangerous message. This is the same family-caregiver angle. It has very few reviews.

  • GrannySafe

    A paid Chrome extension for protecting seniors in the browser, at $9.99 a month or $99 a year. It shows that families pay for this kind of product, and that there are already many small competitors.

  • Nomorobo Scam Detector

    Takes pasted text or screenshots and returns a scam assessment. It runs in the cloud and says uploads are deleted within 24 hours.

  • Scamly / ScamLens / TrustCheck AI

    A long tail of indie apps that check screenshots for scams. Scamly reads uploaded screenshots for scam tactics. ScamLens (on Product Hunt) works without an account. TrustCheck AI gives Low, Medium or High risk ratings for $3.99 a month after four free scans. All three run in the cloud.

  • OnGuardAI

    A phone-call app for seniors that detects fraud in real time and texts both the user and a family member when it spots a scam. It goes after the same buyer, worried adult children, but on voice calls rather than chats.

Checked 2026-10-15

Risks

  • Google and Apple will likely ship this natively in Messages and Android
  • Consumers resist paying for prevention until after a loss
  • False reassurance on a missed scam is a reputational and legal risk
  • Messaging web apps change their DOM often

Best on tech readiness and team fit; market pull and open space are the weak point (5).

tech 7 · pull 5 · space 5 · fit 7 · build 7

Exposed

Companies that could benefit or be threatened. News and context, not investment advice.

Momentum of its main topic

26 developments this week +6 vs last week
21 Sep: 0 developments22 Sep: 0 developments23 Sep: 0 developments24 Sep: 0 developments25 Sep: 0 developments26 Sep: 0 developments27 Sep: 0 developments28 Sep: 0 developments29 Sep: 0 developments30 Sep: 0 developments1 Oct: 0 developments2 Oct: 0 developments3 Oct: 0 developments4 Oct: 0 developments5 Oct: 0 developments6 Oct: 0 developments7 Oct: 0 developments8 Oct: 4 developments9 Oct: 5 developments10 Oct: 4 developments11 Oct: 3 developments12 Oct: 3 developments13 Oct: 1 development14 Oct: 6 developments15 Oct: 7 developments16 Oct: 2 developments17 Oct: 2 developments18 Oct: 1 development19 Oct: 4 developments20 Oct: 4 developments
Stage: Markets

Sources

  1. Google DeepMind and Singapore Government collaborate to build fine-tuned AI model for scam detectionGoogle DeepMind
  2. A 35B multimodal model running on a phone with ~3GB memory? MiniCPM-V 4.7 demo is pretty wildr/LocalLLaMA
  3. Web search for a 1.7B model running fully on a phone, no search API and no backend (open source)r/LocalLLaMA
  4. Apate sends AI agents undercover to get scammed so they can gather fraud intelligenceTechCrunch AI
  5. Nearly 9 in 10 Card Issuers Turn to AI to Stop Fraud Without Blocking SalesPYMNTS

Status history

  • 2026-10-15 Flagged as buildable