Everything checks out
    That's the problem

    A scam built for you passes every check your filter runs. It lands looking like any other email.

    Darwin runs a different check: what is this message actually trying to get you to do?

    What your filter sees

    Inbox
    Your account access is limited
    BBilling Support9:32 AM

    We noticed unusual activity, so we've temporarily limited your account. Confirm your account within 24 hours to restore access.

    Real senderNo tellsNothing to scan

    Set it up once
    Darwin watches from then on

    1
    Connect your inbox

    Sign in with Gmail. Read-only access, and we never sell your data.

    2
    Darwin watches quietly

    Every new email gets a quiet scan. Safe mail stays untouched.

    3
    It speaks up in the thread

    Something off? Darwin replies right in the thread, just to you.

    What Darwin catches

    Credential phishing

    Fake login pages dressed up as your bank, Microsoft, or a delivery service.

    Spoofed senders

    Lookalike domains and reply-to tricks that make a stranger look like someone you trust.

    Account-locked scares

    “Verify within 12 hours or your account is locked.” Urgency built to make you click before you think.

    Invoice & payment fraud

    Surprise invoices, refund bait, and wire-change requests aimed straight at your hard earned money.

    Malicious attachments

    Tampered PDFs and docs that want you to open something you never asked for.

    And the all-clear too

    When an email is genuinely fine, Darwin stays quiet and out of your way.

    Source: FTC Consumer Sentinel Network, 2024