Check before you transfer.
Free AI check for suspicious messages, invoices and payment requests — plus the exact steps to take if money has already moved. Built for Malaysia.
✓ Free · ✓ No sign-up · ✓ We don't store what you paste · Sources: official regulator lists
If money has already moved
Call 997 at any hour, and call your bank's fraud hotline. If you cannot get through on 997, go straight to your bank — its fraud line is 24-hour. Then lodge a police report at the nearest station. Official sources conflict on whether 997 now replaces that report — NFCC and Bank Negara Malaysia both say lodge one; the Government Spokesman said in March 2026 that 997 alone is enough. Do it anyway: an hour lost if unnecessary, the investigation lost if not. The first hours matter most.
Read the full first-24-hours guideHow it works
1
Paste it
Drop in the message, invoice or offer you're unsure about.
2
We check it
Against known Malaysian scam patterns and official alert lists.
3
You get a verdict
A clear risk level and exactly what to do next.
Common scams right now
See all scam types →Frequently asked questions
Is JagaShield a government service?
No. JagaShield is an independent, free tool. We link to and cite official sources — PDRM's Semak Mule, BNM's Financial Consumer Alert List, the SC's Investor Alert List, and the 997 NSRC hotline — but we are not affiliated with any of them.
Is it really free?
Yes. The checker and all guides are free, no sign-up. A paid business tier (auto-scanning invoices and inboxes) is planned; join the waitlist.
What can I check?
Suspicious WhatsApp/SMS messages, emails, invoices, payment requests, links, and offers. Paste the text, or upload a PDF (up to 2 MB). Screenshots aren't supported — paste the text from one instead.
Do you store what I paste?
No. Submissions are analysed in memory — via a third-party AI provider whose API terms prohibit training on your data — and discarded once the check completes. We keep only an anonymous fingerprint and the verdict for abuse prevention.
The checker said "Not fraud" — am I safe?
Not guaranteed. No record and no red flags ≠ safe. For any payment to a new payee, verify by calling the company on a number from their official website — never a number from the message itself.
Semak Mule shows no record for the account I checked. Is it safe?
No record only means no report yet. Scammers rotate fresh mule accounts constantly. Treat "no record" as "unknown", not "clean".
Money already left my account. What do I do?
Call 997 (NSRC) and your bank's fraud hotline immediately to trigger a freeze — then lodge a police report at the nearest station. Official sources conflict on whether 997 now replaces that report: NFCC and Bank Negara Malaysia both say lodge one, while the Government Spokesman said in March 2026 that 997 alone is enough. Do it anyway — an hour lost if unnecessary, the investigation lost if not. Speed matters more than anything else.
How accurate is the AI check?
It's pattern-matching against known Malaysian scam playbooks plus official alert lists — strong at spotting classic cons, not a guarantee either way. Treat it as a fast second opinion, and the verification checklist as the real protection.
The company isn't on BNM's or the SC's alert list. Is it safe?
No. Those are warning lists built from reports received, not registers of licensed firms. BNM states expressly that absence from the Financial Consumer Alert List is not confirmation that an entity is licensed. Check the regulator's licensed-entity register, and check SSM for registration — registered is not the same as licensed.
JagaShield Pro (coming)
Auto-scans your business inbox and invoices, verifies supplier bank-detail changes by call-back before you pay, and checks every new payee against live alert lists. Join the waitlist — founding businesses get 6 months free.