A second opinion before you click, pay or reply.

Paste a link and every detection engine runs in front of you — domain age, blocklists, where it really goes, a picture from the sandbox — each passing or failing.

Drop an attachment: Zala reads what it really is, finds macros and hidden links, and opens web-page files with all network blocked to see what they do.

Zala plays the scammer — a fake bank, a "son" with a new number, a police threat — and you practise saying no. Send one to your parents.

See the tricks marked in the words themselves: the deadline, the borrowed authority, the secrecy, the ask for a code.

Press Listen and your phone reads the result in your language — for anyone who finds reading hard.

Add Zala to a Telegram family group. It stays quiet, and replies only under a link that shows a clear sign of a scam.

Before Ramadan, Hajj, school term and White Friday, a short note on the scams that come with each — to forward to family.

One tap under a warning tells the family who agreed that you want a word before paying someone — never what it's about.

On a computer, the extension marks chat links that borrow a bank's name, hide their real address, or show one site and open another.

Someone new online, weeks of friendly talk, then an investment app. Paste the chat, export it, or choose screenshots — and see which stages it has reached.

A "free iPhone" from a famous shop, or a famous face selling trading: see whether the link really goes to the brand.

Regulators' warnings, links to every Gulf register to search the licence, and the questions that decide it.

Cheap packages sold on WhatsApp, and donation appeals paid to personal accounts — before you pay.

On Android, add Zala to your home screen, then tap Share → Zala Secure on any message, screenshot or voice note.

Send “menu”: first-hour steps, hacked accounts, family alerts, reports, wallet and IBAN checks — the same answers as Telegram.

A voice note asking for your code is caught in Gulf, Saudi, Egyptian, Levantine, Iraqi and Moroccan Arabic, not only formal Arabic.

Larger text (A+), full keyboard and screen reader support, stronger contrast — and it loads faster on older phones.

The browser warning before you type a password on a fake bank page now comes for Firefox and Safari, as well as Chrome and Edge.

Send one link: it opens in simple mode, in their language, with your number behind “Call my family”.

A picture for your WhatsApp Status: one scam, the one thing to notice, what to do. Five languages.

Posters with a QR code, the family guide, staff rounds and a message to send your people.

Paste or drop anything — a message, link, account number, headers, screenshot, PDF, voice note or app file — and the right check runs.

Big text and three big buttons — check a message, call my family, I just got scammed. Made for parents and grandparents.

Seven rules, your family safe word and the first hour — in English, Arabic, Urdu, Hindi and Tagalog. Print it or send it on WhatsApp.

What scanning it would do — the site it opens, a Wi-Fi it joins, a crypto payment it fills in.

How old it is, whose brand it borrows, and whether it only takes payments nobody can reverse.

Whether the IBAN is real, where the account is, whether the supplier's account changed — and whether the invoice PDF's figures add up.

Who really sent it: SPF, DKIM and DMARC, the server it came from, and where replies really go.

The .apk someone sent you, read without installing it: can it read your texts, or tap for you?

Step-by-step recovery for WhatsApp, Instagram, Gmail, Outlook and your bank — only the services' own pages.

Which breaches your address is in, what leaked, and an alert when it shows up in a new one.

Be told when a parent runs into something serious — with their consent, and never what it was.

Whether other people reported it — and for crypto wallets, the US sanctions list and known phishing wallets.

A “bank” texting from a mobile number, a foreign number, an email address or an “AD-” marketing sender.

Task jobs, trading groups and guaranteed returns: answer what happened, and see whether it's the usual script.

The text for your bank and the police, ready to send, and what to do first — after losing money or a code.

A picture of where a link really goes, taken on a separate server — so you never have to open it.

Who can send email as you, DNS and certificate changes, and look-alike domains — with a history of what changed.

A courier link asking for your card to “receive” money, or a transfer screenshot that is still pending — Dubizzle and OpenSooq scripts.

Invite a parent, see who you watch over and every alert — on your phone or on Telegram.

One shared memory of every supplier's bank account, so whoever pays next is warned when it changes.

Forward a suspicious email and get the answer by email — including who really sent it.

Install the app and get alerts on your phone: new breaches, a relative's serious check, a changed domain.

A “bank officer” or a “relative in trouble” on a voice note: send it, and the words are checked like any message.

Verdicts in Urdu, Hindi and Tagalog as well as English and Arabic — picked up from the message or your phone's language.

A recruiter asking for a visa or medical fee, from a free mailbox or a look-alike domain — and how to check an offer yourself.

A deposit before the viewing, a landlord abroad, no permit on the advert — and what to check before paying.

Twelve messages, real and not, with the one thing to look at in each. Share it with family.

One button: the steps in order for the first hour, your report text, and a message to your family that you need help.

Voices can be faked now. Agree a word only your family knows — made on your phone and never sent anywhere.

Messages people received here, shown only with their separate consent and after names are removed.

A twelve-message round for your team, scored as a team — never per person.

This week's scam patterns, counted by type — never anyone's messages. Every Sunday on Telegram if you like.