Check an online store
Before buying, review trust signals and potential risks.
Check this websiteIs this message a scam?
Unsure about a text message, email or link? Understand suspicious signs and your next steps without opening the link.
Check before you act
Clicking “Check this message” automatically sends complete URLs to TechAtelier and Google Web Risk, including query parameters and without # fragments. Message text and images stay on your device.
!
Local analysis
Your next step
Already acted? What should I do?
What the link shows
- Organisation named
- Link destination domain
- Reference domains
Reference list is not exhaustive. The link was not opened.
Why this result?
Addresses found and analysis limits
No site was visited. Local signs and Google reports are separate and do not guarantee the message is genuine.
Detected addresses · Google Web Risk
| Checked address | Google result | Details | Check and validity |
|---|
Excludes the message, screenshot and analysed addresses.
Contribute to the fight against phishing
You can send a suspicious address to TechAtelier for review. This initial service does not send external reports or automatically block websites.
Check a message containing a web address first to choose what to submit. You can also track an existing contribution with its code.
This private code allows you to track or withdraw the contribution. It is not saved on this device and disappears when you edit or clear the message, or leave the page.
What should you do now?
I have not acted
Use a known app or website to verify the request, rather than the link received.
I clicked
Close the page without entering data or installing anything. If you downloaded a file, do not open it; seek help from 17Cyber.
I shared a password or code
Change the affected and reused passwords through official sites. Review sessions and enable two-factor authentication.
I allowed remote access
If you doubt the helper’s identity, end the remote session and disconnect the device from the Internet. From another device, contact your IT team or 17Cyber before using it again.
I paid or shared card details
Contact your bank immediately using its usual number. Keep the message and evidence; seek help from 17Cyber.
Get help from 17Cyber (France)
The reporting services below are for France. Elsewhere, use the relevant local services.
To report: SMS: 33700 · Email: Signal Spam · Website: Phishing Initiative
What this check can tell you
How should I read the result?
“High risk — likely phishing” means that several signs converge: an organisation name, an expiry or renewal notice and an external payment-style address. “Suspicious signs detected” and “Checks are needed” identify other warnings. With no recognised sign, authenticity remains unestablished. The local verdict is based on these signs. An automatic Google Web Risk check separately reports whether each detected address is listed at the time of the lookup, for a limited validity period. It never certifies a safe link.
Which signs are checked?
Requests for passwords, codes or remote access, enabling macros or disabling a security protection, urgency, payment combined with a link, destinations hidden behind @, shortened links and unusual address notation. Explicit French and English rules read the text; no AI is used.
Does a result without warnings mean I can click?
No. Fraud can use an ordinary domain and wording with no recognised sign. Verify through an independent channel regardless of the result.
How are organisation names compared?
References cover Ameli, La Poste/Colissimo, Chronopost, Mondial Relay, PayPal, OVHcloud, French tax services and FranceConnect. Domain lists are not exhaustive. A legitimate partner or a quotation can explain a mismatch; this never proves impersonation.
What stays private?
The message and result stay in page memory until cleared or closed. Neither is included in the page URL or TechAtelier history. Page traffic measurement does not receive your input. After clicking “Check this message”, up to 12 detected HTTP(S) URLs (including query parameters, without fragments) are automatically sent to TechAtelier and then Google Web Risk. The email text is not sent. For these reputation lookups alone, TechAtelier retains neither these addresses nor the reputation results; only request counters are recorded. Browser and extension features operate independently.
Advice based on the Cybermalveillance.gouv.fr phishing guidance and its tech support scam guidance. Version: 1 November 2026.