// Free game

Spot the scam before it spots you.

Messages arrive one at a time. Call each one scam or safe before the clock runs out. Get one wrong and the game stops to show you the exact tell you missed. About half of what arrives is real, so calling everything a scam will not save you. That is the point.

Play full screen ↗ Free. No account. Top scores go on the leaderboard below.
// Leaderboard

All time

  1. No scores yet. Be the first.

Today’s daily

  1. No daily scores yet today.
// Leaderboard rules

Play fair. Keep it clean.

  • Your name is public. Up to 6 letters or numbers. Use initials or a handle. Never use your real full name, or anything that identifies you or someone else.
  • No harmful names. Nothing hateful, harassing, sexual, violent or derogatory. No slurs, no insults aimed at a person or a group, no pretending to be a real person or brand, and no ads or web addresses.
  • Breaking the rules gets you removed. We take down any name or score that breaks these rules, or that we decide is inappropriate, at our discretion and without notice. Scores that look tampered with, automated or impossible are removed too.
  • It is just for fun. There are no prizes. The leaderboard can be reset, changed or switched off at any time.
  • What we keep. The name you enter, your score, the waves you cleared and when you posted. To stop spam we also keep a one-way scrambled code made from your connection, never your actual IP address. Posting needs no account or email, and the game sets no cookies. Your personal record (best score, stats and achievements) is saved only in your own browser and is never sent to us. Daily scores are deleted after about 60 days.
  • Questions or removals. To ask for a score to be removed, or to report one, email support@rexcalloway.com. For privacy questions, email privacy@rexcalloway.com.

By posting a score you agree to these rules and to our Terms and Conditions and Privacy Policy. Gut Check is an educational game, not professional security advice. See our Disclaimer.

// What you will practice
HabitChecking the senderIt costs a few seconds in the game, the same as in real life. It is also the single check that stops most scams.
Web addressesLookalike domainsSwapped letters, extra words, wrong endings, and the address that keeps going after .com. Nine tricks, each explained when it gets you.
ChannelsNot just emailTexts, DMs, voicemails, QR codes, browser pop-ups and calendar invites. Scammers use all of them, so the game does too.
The hard partReal mail that looks scaryFraud alerts, breach notices and SIM swap warnings that are genuine. Knowing when to trust something matters as much as knowing when not to.
Start Here →