# Safety Intercept

> Safety Intercept is the trust & safety layer for the intelligent-finance era — a real-time fraud guardrail at the exact moment money moves. A free Chrome extension intercepts payment scams on PayPal and Wells Fargo Zelle and detects phishing emails in Gmail, reading each outgoing payment memo and inbound email and warning the user in plain English before money leaves. For businesses, the same engine is an embeddable fraud-detection + explainability + confirm-before-you-send layer, plus a licensable real-time scam-domain feed.

As AI agents increasingly move money on people's behalf, the highest-value safeguard is a permissioned, explainable checkpoint at the moment of action — proactive fraud prevention, a clear "why," and a human confirm/undo step. Safety Intercept is built for everyday people (especially older adults and the families helping them) and for the fintechs, marketplaces, and brand-protection firms that need to earn user trust. Detection is powered by Anthropic's Claude (Haiku) on a Cloudflare Workers relay. Privacy is permissioned and PII-free by design: content is analyzed in transit and never stored.

## Core pages

- [Homepage](https://safetyintercept.com/): What Safety Intercept is, how it works, the interception demo, and the install link.
- [Privacy policy](https://safetyintercept.com/privacy): Data handling. Messages and emails are analyzed in transit and never stored; no raw IP (country only); no exact amounts, email subjects/bodies, or message IDs retained; 90-day retention; opt-in correction sharing.

## Scam guides

- [Grandparent / family-emergency scam](https://safetyintercept.com/scams/grandparent-scam.html): How the scam works, the scripts callers use, how to verify, and how Safety Intercept stops the payment leg.
- [Zelle reversal / fake-refund scam](https://safetyintercept.com/scams/zelle-reversal-scam.html): The "we overpaid you, send it back" pattern, why Zelle is irreversible, and how the Wells Fargo Zelle interceptor catches it.
- [Pig butchering / crypto romance scam](https://safetyintercept.com/scams/pig-butchering-scam.html): Long-con investment fraud, USDT/withdrawal-fee tells, and what the extension flags.
- [PayPal invoice / refund scam](https://safetyintercept.com/scams/paypal-invoice-scam.html): Fake PayPal invoices, the "call this number" trick, and how the PayPal interceptor reads the memo.
- [How to get money back after a scam (US guide)](https://safetyintercept.com/guides/get-money-back-after-a-scam.html): Step-by-step recovery — who to report to (FTC, IC3, your bank), Zelle/wire/gift-card specifics, and realistic odds.

## Scam registry & threat-intelligence feed

Safety Intercept runs a live engine that tracks scam domains, enriches them (registrar, domain age, hosting ASN, TLS cert, impersonated brand, payment rails, phishing-kit fingerprint), and clusters them into campaigns (one actor across many domains). Aggregate, anonymized, scam-side data only — no user PII. A public scam registry and a licensable real-time scam-domain feed are in development. Feed enquiries: bleblanc@berkeley.edu.

## Tools

- Install (Chrome): https://chromewebstore.google.com/detail/safety-intercept/bpafnjhfjimdoamnjepkfljpegpmmeom
- Public scam-checker API (no auth): POST https://shield-relay.bleblanc.workers.dev/check with `{ "description": "<situation text>" }`. Returns `verdict`, `confidence`, `tactics`, `headline`, `what_to_do`.
- Report a scam: the homepage registry section accepts domain submissions.

## Facts about the product

- Supported surfaces: PayPal payments, Wells Fargo Zelle send flow, Gmail.
- Manifest V3 Chrome extension. React 18 + Vite.
- Detection: Anthropic Claude Haiku via a Cloudflare Workers relay (~500ms).
- Privacy: content analyzed in transit and never stored; country-only geo (no raw IP); exact amounts bucketed to ranges; random non-identity install id; 90-day retention. The extension never sees passwords, balances, or account details.

## Contact

- Maintainer: Billy LeBlanc
- Email: bleblanc@berkeley.edu