09Websites and digital assetsEveryday tools
Rega, Bodkim
check a suspicious message with one paste
rega-bodkim.netlify.app
A Hebrew site where you paste a suspicious SMS, email or WhatsApp message and get an assessment of whether it's a scam and what to do right now.
Live since October 1, 2026. Never calls a message "safe"
The challenge
Message scams impersonate names everyone knows: the postal service, banks, national insurance. A checker that calls a scam "safe" is more dangerous than no checker at all, and one that cries "scam" at every real message is worthless. On top of that, people paste sensitive data: card numbers, ID numbers, phone numbers.
What I did
- Built a reference of how real organizations actually contact their customers, one organization per record, each with a source, alongside a library of known scam patterns.
- Assembled a test set of 152 documented scam messages, most from official sources, and drew on the warnings published by Israel's National Cyber Directorate to track the current wave.
- Made every result end in one specific action, with separate steps for anyone who already clicked the link or paid.
- Built it so the server never opens a suspicious link itself, and the pasted text is never stored or logged anywhere.
- Kept the page deliberately simple: one box, one button, one result. Mobile first, with privacy, terms and accessibility pages.
The decision that made the difference
The site never says "safe". There are only three levels: clear signs of a scam; suspicious, don't click and don't pay; and no signs of a scam found, verify with the organization itself. That third level is never green. No one can guarantee a message is genuine, so even the most reassuring answer sends you to check with the source.
What came out of it
- The site has been live since October 1, 2026.