What it checks
- Emails — headers, sender routing, risky wording and suspicious links, combined into a threat risk score
- SMS messages — scam patterns such as urgency, fake delivery notices, bank alerts and prize offers
- DMARC — whether a domain publishes a policy that helps stop others spoofing it
How to use it
- Upload a saved email (.eml) or paste the message text
- Press Analyze and review the findings
- Download the report if you need to share it or file a complaint
Privacy and limits
- Email and SMS analysis runs in your browser. Shield does not receive your messages.
- DMARC checks send the queried domain to Google Public DNS. The browser also downloads a public threat-intelligence feed from GitHub; those services receive the usual request metadata.
- PhishGuard is for education and awareness. A clean result does not guarantee a message is safe.
Lost money to a scam?
- Call the national cybercrime helpline 1930 immediately
- File a complaint at cybercrime.gov.in