Flags scams in WhatsApp, Gmail and Telegram, catches virus links, hides your ID and data before AI chats. 100% on-device.
Users
19
+8 in 30 days
Rating
5.0 / 5
+5.00 in 30 days
Ratings
1
+1 in 30 days
Store rank
#152K
#127K among extensions
Version
2.6.183
updated 14 Oct 2026
Users
monthly, 6 months
Latest, 15 Oct 2026:19 usersMove the mouse over the chart for any month
Ratings count
monthly, 6 months
Latest, 15 Oct 2026:1 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About Aruana — Scam Detector: WhatsApp, Phishing & Virus Links
Aruana — Guardian of your data
"Hi Mum, I lost my phone, this is my new number." "Your parcel is held, pay a redelivery fee." "Your account will be suspended." Before you reply, pay or click, Aruana reads the message and tells you, in plain words, what's going on. Analysis runs on your computer. Nothing is sent unless you choose to contribute an example.
WHERE IT WORKS
• Gmail, WhatsApp Web and Telegram Web: a warning appears on its own when a suspicious message arrives or you open a suspicious email
• The Aruana window: paste a text, or drop a PDF or a photo of a QR code, and see the result
• ChatGPT, Claude and Gemini: warns you before you send personal data (more below)
SPOTS THE SCAM BEFORE YOU FALL FOR IT
• Fake links: show one website but take you to another, or imitate your bank with a slightly misspelled address or look-alike letters
• Virus links: web addresses that look like random gibberish are created automatically by malware. Aruana recognizes the pattern and warns you
• "New number" scams: someone pretending to be family asking for money urgently
• Fake deliveries: a courier message says your parcel is held and asks you to pay a fee
• Bank, government and tax-agency impersonation, fake support, "callback" scams, fake lawyers
• Threats and pressure: "your account will be suspended", "pay within 2 hours", "send me the code you received"
• Fake prizes, loans, jobs, "guaranteed" investments, romance scams, sextortion, fake kidnapping
• Remote access: anyone asking you to install remote-control software
• Dangerous files: a program disguised as a PDF or document, in emails and chats
• Hidden text: invisible letters and hidden paragraphs scammers use to slip past spam filters
• QR codes in images: reads the QR inside emails and chats and tells you where it really leads
WATCHES OVER YOU AUTOMATICALLY
• In WhatsApp Web and Telegram Web: checks each message that arrives and the files you receive
• In Gmail: checks the links, whether the sender is really who they claim to be, hidden text, QR codes and attachments of every email you open
• In ChatGPT, Claude and Gemini: warns you when you're about to send personal data, or pasted text with hidden instructions (prompt injection)
KEEPS YOUR PERSONAL DATA OUT OF AI CHATBOTS
Before you paste something into an AI assistant, Aruana swaps your private data for tags like [SSN_1] or [CREDIT_CARD_1]:
• US Social Security and tax IDs, driver's licenses, bank routing numbers
• UK National Insurance, NHS numbers and sort codes
• Credit cards, IBAN and bank details
• Passwords, access keys and tokens
• Emails and phone numbers
The AI's reply comes back with your real data in place of the tags, visible only on your screen. Shortcuts: Ctrl+Shift+P (scan), Ctrl+Shift+H (show or hide the data) and Ctrl+Shift+D (copy the reply with your data).
EVERYTHING STAYS ON YOUR COMPUTER
The scam detector, the name recognizer and the QR reader all work inside your browser. On some browsers, the built-in AI gives a second opinion, still on your machine. No analysis servers and no tracking.
Turn off your Wi-Fi and try it. The analysis works exactly the same.
What leaves your computer: what you choose to send to help improve the detector, an example already stripped of personal data after you review it; and the download of the optional AI models.
GOOD TO KNOW
Aruana was trained on Brazilian scams, in Portuguese, and that is where it is most accurate. In English it checks links, files and QR codes and uses rules, but it catches less. It also reads Brazilian PIX payments and boletos, which only matter if you deal with Brazil. It is an aid, not a guarantee: when in doubt, confirm through another channel, by calling the person or the company on their official number.
FREE
No limit on checks and no sign-up.