NordVPN launches free AI scam checker to detect phishing and fraud in real-time

I tested NordVPN's free scam checker against a real threat in my inbox - here's how it did

You'll need more than standalone services to stay safe from scams. Many of us have grown up with online scams, but the ones we encounter now are far removed from fake deposits, lottery wins, or messages from a long-lost relative who wants to bequeath you millions of dollars as an inheritance. Also: A Meta-powered investment scam is spreading across 25 countries - how to spot (and avoid) it Sure, these boilerplate phishing and spam emails exist -- if you're anything like me, hundreds of them fill my spam folder every week. But when a scammer takes the time to target their content and uses new technology to improve their lure emails, they can be difficult to spot. The problem is that AI can be abused to generate convincing scams that lack the hallmarks of past phishing campaigns. An estimated 82.6% of phishing emails use some form of AI, but can we turn the tables and use AI to fight the trend? This week, NordVPN launched an AI-powered scam checker tool. It's free and web-based, allowing you to quickly check a link, file, or text for evidence of a scam. You can also upload an image or screenshot. You don't need an account to sign up for it -- simply visit the page, submit the information you want to verify, and click analyze. NordVPN's service then checks URLs, email addresses, and phone numbers against known malicious databases and sources. If you want to analyze a body of text, an AI algorithm checks the content for patterns "commonly used in scams, such as scare tactics and artificial urgency," according to the company. I wanted to see how effective an AI-backed scam detector could be. While testing out the web service, I first compared a typical, run-of-the-mill lottery scam pulled from my inbox. Success. It's quite useful to find out why, too, as the scam checker explains which indicators suggest this message is fraudulent. "The message contains several red flags indicative of a scam, including unexpected lottery winnings, a large sum of money, and a request for personal information or fees to claim the prize. It also mentions an unverified bank and a sponsor that does not typically host lotteries, such as Coca-Cola. These elements are common tactics used in phishing scams to deceive victims into providing sensitive information or sending money." Many of us would naturally recognize this as a scam -- but what about something more advanced? Hardly a day goes by that we do not hear about yet another round of layoffs. Many are worried about the impact of AI on their jobs and future prospects, and as a result, fraudsters are taking advantage of our fears. Employment scams can take the form of fake job postings, messages, pay-for-access and training schemes, and, perhaps more recently, targeted recruitment scams for high-level roles. Also: I'm a tech professional, and an AI job scam almost fooled me - here's how I caught on Over the past few weeks, I've been sent at least one or two unsolicited emails daily from "recruiters" that bypass Google's spam and phishing email filters -- a perfect opportunity to test whether or not AI defense tools could detect them, when Google cannot. As a Reddit user also experienced, there are red flags that indicate they are a scam. Too good to be true roles, generic requests for information, a lack of a professional email address or website (every message was sent via Gmail), and no phone number. I've been playing with this recruitment scammer for a while, and they appear to have done their homework. Information was pulled from my LinkedIn and then bolted together, and according to ChatGPT, the "overly dense, stitched phrasing" and "hyper-personalization" -- referencing multiple parts of my background in one long sentence -- is typical of AI pulling from a profile. Add a sentence about a selective process to stroke the ego, and perhaps you'll respond to such an exciting opportunity. I wanted to know how this scam worked, as it isn't often that I come across targeted attempts that slither into my inbox. This scam focuses on building trust. There was no pressure to hand over any information, and I should only give him my CV if I was interested in the role -- a Gartner research director in cybersecurity strategy with a $270,000 - $350,000 salary, plus incentives. However, the following red flags cemented my belief that this was a recruitment scam: What I found particularly interesting as a scam indicator was a subsequent email containing the full Gartner job specification. While the Gartner role does actually exist and has been posted online, the specification I received was tailored to my experience -- most likely through AI, indicated through the following wish-list sentence: "7-15+ years of experience in cybersecurity journalism, investigative reporting, research, or advisory roles." I sent a fake CV, which was well-received. But, to have the best chance of entering the process, I needed to complete an executive bio, an executive cover letter, and a SWOT assessment, the latter being a business assessment of Strengths and Weaknesses, and Opportunities and Threats -- something you wouldn't usually require from a job candidate, another red flag. And now, the catch, sprinkled with urgency: "Given the accelerated timeline for this search, the position is expected to close within the next two days, so timely submission will help ensure your candidacy continues to progress smoothly. To support you in preparing these materials, I work with a specialist who assists senior professionals in developing high-level executive documentation. They can help ensure everything is clearly articulated, professionally structured, and aligned with what the hiring team is specifically looking for. If you'd like, I'd be happy to introduce you so you can work together directly and finalize the materials efficiently." This is where you are caught. The assistant, "Rachel," would help me prepare my materials -- but for a fee. I put NordVPN's tool to the test. I ran four of the main email messages sent by the recruiter through the system, and I received an alert for one of them, which included the assistant's email address, flagged as suspicious. I also compared these findings with online scam checkers from F-Secure and AskSilver. F-Secure flagged the first email as phishing but did not explain why, and AskSilver refused to analyze it. I performed these tests again with several other similar recruitment scam emails I have received recently, and the results were the same. NordVPN's scam checker works well for standard scams and phishing content, but struggles with more advanced, targeted campaigns -- although the team is continually refining and improving the tool. It's not surprising, as threat actors are devising new ways to fleece us every day, and defenders are under pressure to stay ahead of scams and phishing trends. "Recruitment scams are tricky because they often avoid the typical red flags," Domininkas Virbickas, product director at NordVPN, told ZDNET. "Usually, there's no suspicious link or threatening language at the start. The best way to spot them is to pay attention to the process itself. Legitimate recruiters don't offer jobs without a proper interview. They don't immediately push you to other platforms like WhatsApp or personal email. And they certainly don't ask for sensitive personal information or money before you've been formally hired. Whether it's a "training fee," equipment purchase, or depositing a check, any job opportunity that asks you to spend or move money is almost certainly a scam." Today's recruitment scams might span days or weeks in order to create a level of trust before the trap is sprung. You should always treat unsolicited emails with caution and note the email address used -- especially if there's no corresponding website, phone number, or online profiles. Even handing over your CV can be a risk, as it may contain personal information such as your address and phone number. Never pay for an advisory service unless you know it is legitimate, and if a role is proposed to you, it's worth checking online for evidence or even contacting HR for verification. At this moment in time, regardless of the influence of AI, it is still up to us to protect ourselves, our information, and our wallets by following a basic rule: if it looks too good to be true, it probably is.

NordVPN launches a new scam checker to help you spot phishing and fraud - and it's completely free to use

NordVPN has launched a free scam checker to help people identify suspicious messages before interacting with them. This web-based tool allows you to upload texts, emails, and DMs for analysis. It detects common signs of phishing, including malicious links, suspicious phone numbers, and scam-related language. The launch expands NordVPN's growing set of security features housed within Threat Protection Pro, and cements its status as the best VPN for most people. However, many of these protections require a NordVPN subscription. The scam checker is available for free through NordVPN's website. What does the scam checker do? NordVPN says the checker can analyse plain text and images containing text, such as screenshots of suspicious messages. When an image is uploaded, the tool extracts and scans the text rather than analysing the image itself. The checker looks for phone numbers, email addresses, and URLs, then compares them against databases of known malicious activity. It also uses nexos.ai, an enterprise AI platform launched by Nord Security co-founder Tomas Okmanas, to analyse the wording and structure of messages for patterns commonly linked to phishing. This can include urgency, scare tactics, and impersonation. NordVPN is advising users to avoid sharing personal data when submitting messages. It also notes that submissions may be used to help improve its scam-detection systems. The checker supports screenshots in .png and .jpg format (up to 10 MB). It also has the ability to analyze up to five email addresses, URLs, or phone numbers in one scan. The tool currently supports the English language and can be used on desktop, mobile, and tablet. Why is NordVPN adding more scam protection tools? NordVPN has released a number of scam protection features in recent months. Call Protection was expanded to cover Android users in Europe. It also boasts features such as email protection, a link checker, and hijacked session alerts. All fall under its powerful Threat Protection Pro feature. Available on desktop, it can block phishing and malicious URLs, ads, and trackers, while also scanning downloads for malware. Threat Protection Pro is included in NordVPN Plus plans and above, with prices starting at $3.89 per month. "AI has made phishing and scam messages significantly harder to spot. The days when a poorly written email was an obvious red flag are gone," said Domininkas Virbickas, product director at NordVPN. "Scammers can now generate polished, personalized messages at scale, which is why we built this tool to give people a simple way to check any message they're unsure about." How to use NordVPN's Scam Checker The scam checker is free and does not require a download or app update. To use it: * Head to NordVPN's website * Open NordVPN's scam checker page * Paste a suspicious message or upload a screenshot * Wait for the scan to finish * Review the result before taking any action NordVPN says the checker will also be added to its mobile app in the future, where users will be able to open it through Threat Protection Pro.

NordVPN's new tool helps you spot online scams -- and it's free for everyone

For subscribers, the rollout enriches NordVPN's Threat Protection Pro suite * NordVPN has rolled out a new free scam checker tool * It detects if images or messages are fake in near real-time * Everyone can use it without paying for a NordVPN subscription Have you recently received a message or an image that looks completely genuine, but your gut tells you it's not safe to click on it? If so, you'll be pleased to know that NordVPN has just expanded its security offering with a new AI-powered scam detection tool that confirms if you are actually dealing with a phishing attempt or a fraudulent threat. As part of its fight against cybercrime, the best VPN on the market according to TechRadar's reviewers has helpfully decided to offer the tool for free, making it accessible to anyone concerned about the risks of online scams. Indeed, no subscription or account is required to use it, meaning that even your most vulnerable friends or elderly relatives -- often the most frequent victims of scams -- can stay safe without spending a penny. How NordVPN's scam checker works Scams and phishing attacks are growing too fast. AI now makes it significantly easier to create convincing impersonations of customers or employees, while also enabling cybercriminals to automate these attacks on a large scale. "The days when a poorly written email was an obvious red flag are gone," notes Domininkas Virbickas, product director at NordVPN. As new AI-based malware threats are capable of fooling even the most tech-savvy users, those who are less familiar with technology and therefore more vulnerable are particularly at risk. Offering rescue, NordVPN's scam checker analyses messages in text and images, searching for suspicious links, phone numbers, and email addresses to identify any signs of malicious intent. Its embedded AI algorithm identifies patterns typically used in phishing scans and attempts, including intimidating tactics and fake urgent alerts that often prompt people to act impulsively with potential disastrous consequences. We've tried it out and can vouch that it's quite a piece of cake to use: you can simply paste a message or upload a screenshot into the designated field on the NordVPN page to receive a verdict in a matter of seconds. The tool accepts plain text and screenshots in .jpg and .png formats, for a maximum of five email addresses, URLs, and phone numbers per request. An anti-scam mission The VPN giant has recently drawn attention to the extent of current online threats by sharing a survey by the Global Anti-Scam Alliance. It highlighted how consumers were defrauded of a staggering $442 billion last year alone, with more than half of adults reporting being victims of scams during that period. Talking to TechRadar earlier in the year, NordVPN reiterated that protecting its users from online scams is indeed a top priority. Signs of this commitment have already been evident: its Threat Protection Pro suite, while achieving top marks in various phishing tests, has kept growing in these first months of 2026. Recent additions include a call protection feature to identify fraudulent calls before you even answer, and a Dark Web Monitor Pro feature that detects potential data breaches dating back several years. The new free scam checker then comes as an additional bonus to all those who aren't yet NordVPN subscribers. Additionally, the tool further builds on NordVPN's commitment to cyber threat awareness, as the VPN had already previously released a different free service that scans email's links for threats in real-time. Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!