Red Flag Decoder
Paste a message you received or describe your situation in plain language. The decoder scans for fraud patterns across 12 categories and 200+ signals drawn from 27 years of active investigation casework.
Paste a direct message, describe a pattern of behaviour, or summarise what has happened. Plain language works fine.
Try an example:
This tool matches text against fraud pattern signals from investigation casework. It is a screening aid, not a definitive investigation. Results reflect probability patterns, not certainties.
How the Red Flag Decoder works
The decoder scans your text against a library of over 200 phrase patterns and signal clusters built from 27 years of active investigation casework at AllRussian. It covers twelve fraud categories: military and deployment romance scams, pig-butchering crypto investment fraud, advance-fee and inheritance schemes, love bombing and fast emotional escalation, identity avoidance, emergency money requests, document justification tactics, isolation and secrecy pressure, widower and tragedy backstories, job and contractor abroad narratives, sextortion signals, and platform-specific investment escalation.
Each pattern is weighted by how exclusively it appears in confirmed fraud cases. Patterns that occur almost only in fraud — such as military regulations blocking video calls, or a withdrawal fee required before releasing investment profits — score as Critical. Patterns that are common in fraud but can occasionally appear in legitimate situations score as Medium or Low.
Unlike a simple keyword search, the decoder looks for phrase clusters and contextual combinations. A single mention of "crypto" is not a flag. "She showed me her trading account returns and said she could teach me" combined with "the platform she recommended" is a documented pig-butchering entry sequence.
Everything runs locally in your browser. No text is sent to any server.
Frequently asked questions
What can I paste into the decoder?
Any text you have received or a description of your situation. Messages from dating apps or email, a description of how a relationship has developed, the details of a financial request, or a summary of anything you are unsure about. The decoder handles natural language — no special formatting required.
Is my input stored or shared?
No. The decoder runs entirely in your browser using JavaScript. Nothing you type is sent to any server. No data is transmitted, stored, or logged by AllRussian or any third party.
What does Critical mean versus High or Medium?
Critical flags are patterns that appear almost exclusively in confirmed fraud — a financial request following a scripted romantic arc, a withdrawal fee required before releasing investment profits, or military regulations cited as the reason video calls are not possible. High flags are strong individual indicators. Medium flags are common in fraud but can occasionally appear in legitimate situations. Low flags are minor signals worth noting.
The decoder found no red flags. Does that mean I am safe?
Not definitively. The decoder analyses only what you provide. Sophisticated fraud operations may not show their script in early messages. If you have any doubt — particularly before any financial commitment — a professional Identity Verification is always the most reliable way to confirm who you are dealing with.
What should I do after receiving a Critical or High result?
Do not send any money or make any financial commitment. Stop all transfers immediately. Commission a professional Scam-Risk Review or Identity Verification before taking any further action. AllRussian delivers reports within 48 hours for most CIS-region cases.
Go deeper on what the decoder found
Scam Risk Calculator
12 questions. Weighted scoring across six risk dimensions. Get a risk percentage and per-category breakdown.
GuideMilitary Romance Scam: 15 Red Flags
The most documented backstory in Eastern European romance fraud.
GuidePig Butchering: 9 Signs the Platform Is Fake
Identify a fraudulent trading platform before you deposit.