Skip to content
For agents

Guide

Is it a scam? Check it with your AI, and keep the proof

By Brennan Zambo · Published

Short answer: To check whether an email, link or wallet is a scam, ask your AI to run it through Zambo's checks: email_verify for emails and scam_check for links, domains, wallets and contracts. You get a plain-language risk read plus a verifiable receipt that shows what was checked and when.

Why "it looks fine" isn't enough

Scam emails copy real brands, fake links look almost right, and a wallet address is just a string of characters. Asking an AI "is this legit?" without tools gets you a guess. A real check looks at evidence: who actually sent the email, what is known about a domain or address, and whether it has been reported.

Keeping proof of the check matters too. If you report a scam to your bank, your employer or a platform, a receipt of what you checked and what came back is easier to share than a memory of a chat.

Step by step

  1. Connect. Paste https://zambo.dev/mcp into your AI. No key.
  2. Don't click anything. Copy the link or address as text. For an email, copy the full headers if your mail app lets you ("show original").
  3. Check an email. Say: "Use zambo email_verify on this email." It reads SPF, DKIM and DMARC results, the sender's domain identity and brand ownership, and SCAMRA threat signals, and tells you whether the email is really from who it claims.
  4. Check a link, domain, wallet or contract. Say: "Use zambo scam_check on this." It answers "should I interact with this?" using SCAMRA threat intelligence, with an optional wallet cross-reference.
  5. For a Base wallet, add context. basehawk_score scores a Base wallet from 0 to 1000. sybil_detect flags sybil risk on Base or Monad.
  6. Screen pasted text. If a message tries to instruct your AI ("ignore your rules and…"), prompt_shield checks it for prompt injection.
  7. Keep the proof. Every check returns a verifiable receipt link. Save it, or ask for workflow_close to get one summary receipt for all the checks.
  8. Share it if needed. Send the receipt link, or make a handover (handover) for a bank, IT team or family member.

Tip: these are full-catalog tools. If your AI doesn't see them, ask "use zambo to scam-check this" and zambo_universal routes the request, or use capability_search.

What you get

Limits: a check is a risk signal, not a verdict. A clean result doesn't mean something is safe, and a receipt shows the saved result hasn't changed since the check, not that the result is correct. When money is involved, confirm through a channel you already trust.

Related

FAQ

How can I check if an email is a scam?

Ask your AI to run Zambo's email_verify on it. It checks SPF, DKIM, DMARC, domain identity and threat signals, and returns a verifiable receipt.

How do I check a suspicious link or wallet address?

Ask your AI to run Zambo's scam_check on the link, domain, wallet or contract. Don't click the link first.

If the check comes back clean, is it safe?

Not necessarily. It's a risk signal. Confirm anything involving money through a channel you already trust.

Why keep a receipt of the check?

It records what you checked, when, and what came back, in a link you can share with a bank, employer or platform.

Does it cost anything?

These tools are free up to 20 checks per tool per day. A $0.99 Day Pass covers heavier use for 24 hours.

CTA: Paste zambo.dev/mcp into your AI. Then paste the suspicious link as text and ask "is this a scam?"

Add Zambo to my AISee what Zambo can do

All guides · Docs · For agents · Pricing