ScamShield Privacy Architecture
ScamShield OSS is designed to protect citizens from deceptive fraud without creating surveillance or data leak risks. We do not store, track, or sell your scanned data.
Zero Cloud Uploads for OCR
Screenshot scanning uses in-browser WebAssembly (Tesseract.js). Your confidential screenshots, bank SMS, or WhatsApp chats are parsed inside your browser memory and never uploaded to any server.
Zero Databases & User Accounts
There is no user authentication, no cookies, no tracking pixels, and no database backend. When you close or refresh your tab, all scanned content is instantly erased from RAM.
Local Heuristic Scoring
Our 130+ scam pattern checks execute entirely in client-side TypeScript. Calculation of risk scores happens offline on your own CPU without calling external black-box APIs.
Zero Cloud Models & Zero Keys
Every cloud model has been removed. Threat intelligence runs 100% on-device via local Ollama or our deterministic engine. No API keys, cloud accounts, or remote connections are required.
Open Source Transparency Guarantee
Every line of code is open source under the MIT License. You can inspect all network operations using your browser DevTools (Network tab) or run ScamShield completely offline within a local Docker container:
docker build -t scamshield-oss . docker run -p 3000:3000 scamshield-oss