Received something suspicious?

Follow the Stop, Challenge, Protect protocol before acting.

Stop

Do not respond. Do not click. Take time before acting.

Challenge

Do not comply. End the call. Only criminals rush you.

Protect

If unsure, verify. Contact your bank using a trusted number.

Check It Now

Describe or upload a screenshot of what you received. Get an instant AI assessment.

Threat Catalogue

Red Flags

■ CRITICAL Asks for PIN, Password or Login

Your bank will never ask for these by phone, text, or email.

■ CRITICAL Keep This Secret

Scammers isolate victims. If told not to tell anyone, tell someone immediately.

■ CRITICAL Remote Access Requests

Never let anyone unknown control your computer. This gives them access to everything.

■ CRITICAL Threats of Arrest or Legal Action

Real authorities do not threaten arrest over the phone demanding immediate payment.

■ CAUTION Urgency and Pressure

Act now or lose your account. Legitimate organisations give you time to think.

■ CAUTION Unusual Payment Methods

Gift cards, cryptocurrency, or wire transfers. No real company asks for these.

■ CAUTION Too Good to Be True

Won a lottery you did not enter. Unexpected inheritance. It is a scam.

■ CAUTION Unexpected Contact

You did not initiate contact. Verify using official channels.

URGENT

Already shared details?

Contact your bank immediately using the number on your card
Change passwords for any compromised accounts
Report to States of Jersey Police
Document everything you shared

Police Fraud: 01534 612612

Verify a Message Connecting

Assistant

Describe the message, call, or email you received, or upload a screenshot. I will help you assess whether it is suspicious and what to do next.

1. Service Description

ScamAware Jersey provides an AI-powered tool to help Jersey residents assess whether communications they have received may be fraudulent. You may submit text descriptions or upload screenshots of suspicious messages for analysis. This service is for informational guidance only and does not constitute professional, legal, or financial advice.

2. AI Limitations

Assessments are generated by an AI model (Anthropic Claude) and may be incorrect, incomplete, or misleading. You must not rely solely on this tool when making decisions. Always verify through official channels such as States of Jersey Police on 01534 612612.

3. Image Upload Terms

Uploaded images are transmitted to Anthropic's API for real-time analysis and are not stored on our servers.
Anthropic may retain API inputs for up to 7 days for trust and safety screening, after which they are permanently deleted.
Do not upload images containing: full bank account numbers, passwords, PINs, identity documents, or images of minors.
You warrant that you have the right to share any personal data visible in uploaded images, or that such sharing is necessary for the legitimate purpose of fraud detection.

4. Data Controller

ScamAware Jersey operates as a community fraud prevention initiative. For data protection enquiries, contact: privacy@scamaware.je

5. Data Processing

Sub-processor: Anthropic, PBC (San Francisco, USA) processes your messages and images under their Data Processing Addendum (DPA), which incorporates Standard Contractual Clauses for international data transfers.
Hosting: Cloudflare, Inc. provides edge computing and hosting infrastructure.

6. Legal Basis for Processing

Legitimate Interest (UK GDPR Article 6(1)(f)): Fraud prevention and public safety, a recognised legitimate interest under GDPR Recital 47.
Explicit Consent (UK GDPR Article 6(1)(a)): Obtained via the AI Disclaimer acceptance before first use.

7. Data Retention

Text conversations exist only in your browser session and are not stored server-side.
Uploaded images are processed in real time and not retained by ScamAware Jersey.
Anthropic retains API inputs for up to 7 days for safety purposes, then deletes them.
No user accounts, profiles, or persistent records are created.

8. Your Rights

Under UK GDPR (Articles 15-22), you have the right to: access your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing. As we do not store your data beyond the browser session, most of these rights are satisfied by design. For enquiries, contact: privacy@scamaware.je

9. Automated Decision-Making

This service uses AI to generate guidance. It does not make automated decisions with legal or similarly significant effect. You make all final decisions about how to act.

10. Limitation of Liability

ScamAware Jersey is provided as-is with no warranty. We accept no liability for the accuracy of AI analysis, or for any loss arising from actions taken or not taken based on the tool's output.

GDPR & Data Protection Compliance

ScamAware Jersey is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data Protection (Jersey) Law 2018 administered by the Jersey Office of the Information Commissioner (JOIC).

Privacy by Design

Zero server-side storage: We do not store your messages, images, or conversation history on any server. All chat data exists only in your browser session and is cleared when you close the tab.
Pass-through processing: Uploaded images are transmitted directly to Anthropic's API for analysis and are never written to disk, logged, or cached by our infrastructure.
No user accounts: We do not collect names, email addresses, or any registration data.
No cookies: We use only browser sessionStorage (not cookies) to remember your disclaimer acceptance for the current session.

Sub-Processors

Anthropic, PBC (San Francisco, USA) — AI model provider. Processes text and image inputs via their Messages API. Anthropic holds SOC 2 Type II, ISO 27001:2022, and ISO/IEC 42001:2023 certifications. Their Data Processing Addendum incorporates EU/UK Standard Contractual Clauses (Modules 2 and 3) for lawful international data transfers. API inputs are retained for up to 7 days for safety screening, then permanently deleted.
Cloudflare, Inc. (San Francisco, USA) — Edge computing, CDN, and DNS. Provides the Workers serverless runtime and Pages static hosting. Cloudflare's DPA also incorporates Standard Contractual Clauses.

International Data Transfers

Your data is processed by services based in the United States. These transfers are lawful under UK GDPR Chapter V, relying on Standard Contractual Clauses (SCCs) incorporated into our agreements with both Anthropic and Cloudflare.

Data Subject Rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data under UK GDPR Articles 15-22. Because we do not store personal data beyond your browser session, these rights are largely satisfied by the architecture itself. If you have concerns, contact: privacy@scamaware.je

Complaints

If you believe your data protection rights have been infringed, you may lodge a complaint with the Jersey Office of the Information Commissioner (JOIC) at oicjersey.org, or the UK Information Commissioner's Office (ICO) at ico.org.uk.

Legitimate Interest Assessment

We have conducted a Legitimate Interest Assessment concluding that the fraud prevention purpose of this tool, combined with our zero-retention architecture and explicit user consent, appropriately balances our legitimate interest against users' privacy rights. A copy of this assessment is available on request.