1. Urgency is a reason to pause
When a message demands a transfer, a code or action within minutes, do not respond under pressure. Urgency can appear in human impersonation or automated campaigns; it does not identify the sender by itself.
2. A voice or photo is not identity proof
A familiar voice, family photo or convincing video can be copied, edited or taken out of context. Treat it as a reason to verify, not as confirmed identity.
3. Verify through an independent channel
Call a saved contact, use a channel you already knew, or ask a private question. Do not use the number, link or account supplied by the suspicious message.
4. Never share codes or credentials
A WhatsApp code, OTP, password or recovery phrase is not identity proof. Do not forward it even when the message appears to come from someone you know.
5. Reply to exit, not to debate
A safe reply can say you will not send money, codes or data in that chat and will confirm through a number you already saved. Do not accuse the sender, explain personal details or continue when the pressure increases.
6. Preserve context, not only a screenshot
Keep the link, time, sender account and original file when it is safe to do so. A screenshot can remove metadata and cannot reconstruct the full context.
7. If you already replied, work in steps
Stop further payments, contact the relevant bank or platform through an official channel, protect compromised credentials and warn contacts from a trusted channel. Document the event without publishing private data.
8. What this checklist can and cannot say
The tool counts observed signals and suggests a next step. It does not identify an author, confirm a scam, authenticate a voice or replace a bank, platform or report.
Frequently asked questions
Hogar Mas · hogarmas.net
Does this tool confirm that a message is a scam?
No. It organizes signals that justify a pause and independent verification. Few signals do not prove that a message is safe.
Can a cloned voice be detected by listening alone?
Not reliably. A voice can sound convincing; verify identity through a known channel and never send codes or money for an unexpected request.
What if the message says it is a family member?
Do not use the number or link in the message to confirm it. Call a saved contact or ask something the sender could not learn from the same thread.
What can I reply to a suspicious message?
Keep it brief: say you will not send money, codes or data in that chat and will confirm through a channel you already know. You do not need to accuse the sender or explain private information.
Does the downloaded card include my conversation?
No. The browser creates the card from a fixed reply and general reminder. It does not include what you pasted, numbers, links or a risk score.
Is the text uploaded to a server?
No. The checklist runs in your browser, does not send the text and does not store it. A shared result contains only a signal summary, not the original message.
Can I check an image received on WhatsApp?
Yes, but the downloaded copy may not be the original. Open the local C2PA and metadata checker, remembering that a missing signal does not prove an image is human-made or fake.
What if I already transferred money?
Contact your bank or platform quickly through official channels, keep receipts and protect your accounts. Do not send more money to supposedly unlock or recover the first payment.
Official guidance consulted
Chile Government CSIRT: impersonation and digital fraud guidance