ToolKitKnow before you tap.
Check links for phishing, messages for scams and UPI QR codes before you pay — entirely on your device. No servers reading what you check, no account to create.
How to use the Link Scanner
Paste in a URL and ToolKit checks the redirect chain, looks for phishing and malware indicators, verifies the SSL certificate, and scans for trackers. Five checks, then a plain verdict — no jargon.
-
1
Install
Get ToolKit free from Google Play — no account needed.
-
2
Paste a link
Paste the URL into the Link Scanner and choose your redirect-hop depth.
-
3
Start scan
Step through all five checks and get a clear, color-coded verdict.
Catch risky links before they catch you
Five on-device checks run before you ever open the page in your browser.
Redirect chain tracing
Follows every hop before you land, so a hidden redirect chain can't surprise you.
Phishing heuristics
Flags IP-literal hosts, punycode/homoglyph tricks, and spoofed brand names.
Malware indicators
Checks shortener patterns, risky file extensions, and high-abuse TLDs.
SSL/TLS certificate check
Confirms the certificate is valid and flags one that's expired or expiring soon.
Tracker stripping
Detects tracking parameters and hands you back a cleaned, shareable link.
Private by construction
Every check runs on your phone — the URL you scan is never sent to a ToolKit server.
Spot scams before they cost you
Two tools for the tricks that reach you by message and by QR code — both run on your phone.
Scam Message Detector
Got an SMS, WhatsApp or email that doesn't feel right? Paste it in — or share it to ToolKit from any app — and see exactly which scam tricks it uses.
- Spots OTP and PIN requests, “your account will be blocked” threats, fake prizes, easy-money jobs, payment demands and fake bank or courier names.
- Reads English, Hindi and Hinglish messages.
- Finds every link in the message, so you can scan each one with a tap.
- Shows a clear risk level and what to do next — the message never leaves your phone.
UPI QR Check
Before you pay a QR code, upload its picture from your gallery. ToolKit reads it on your phone and shows who you'd be paying, with warnings in plain colours.
- Shows the payee name, UPI ID, amount and note exactly as the QR states them.
- Flags a missing or odd UPI ID, a mobile-number account, uncommon bank handles, scammer words in the name, very large amounts and other currencies.
- Green, orange and red lines, so you see at a glance what needs a second look.
- Opens the payment in your own UPI app only when you tap the button. ToolKit never makes payments.
The name in a QR code is written by whoever made it and isn't verified by a bank, so ToolKit never calls a payment “safe”. Always match the name in your payment app too.
Check it from wherever you read it
“Verify with ToolKit”
Select a link or message in any app and pick Verify with ToolKit from the menu or the Share sheet. Links go to the scanner; longer messages go to the Scam Message Detector.
English & हिन्दी
Switch language with the button at the top right of any screen. ToolKit remembers your choice, so you only pick it once.
Save QR codes to your gallery
Made a QR code with ToolKit? Share it, or save it to your gallery in one tap — it lands in Pictures/ToolKit, ready to print or send.
More than a scanner
A handful of small tools we kept reaching for, so we built them into the same app.
Scam Message Detector
Paste a suspicious SMS or WhatsApp message and see which scam tricks it uses.
UPI QR Check
Upload a UPI QR from your gallery and see who you would pay, with warnings.
QR Scan & Generator
Scan any QR code straight into the scanner, or generate your own and save it to your gallery — offline.
Password Generator
Create strong, random passwords with the character sets you choose.
English & हिन्दी
Switch language in one tap from any screen. ToolKit remembers your choice.
Network Scan
See which devices are connected to your own Wi-Fi network.
Dead Pixel Test
Run an on-screen test to spot dead or stuck pixels on your display.
App & Display Shortcuts
Jump straight to your installed apps list and display settings.
Scam Message Detector
Paste a suspicious SMS or WhatsApp message and see which scam tricks it uses.
UPI QR Check
Upload a UPI QR from your gallery and see who you would pay, with warnings.
QR Scan & Generator
Scan any QR code straight into the scanner, or generate your own and save it to your gallery — offline.
Password Generator
Create strong, random passwords with the character sets you choose.
English & हिन्दी
Switch language in one tap from any screen. ToolKit remembers your choice.
Network Scan
See which devices are connected to your own Wi-Fi network.
Dead Pixel Test
Run an on-screen test to spot dead or stuck pixels on your display.
App & Display Shortcuts
Jump straight to your installed apps list and display settings.
Questions people ask
Does ToolKit send the links I scan anywhere?
No. Every check runs on your phone. The only network request ToolKit makes during a scan is fetching the page itself — to follow its redirects and read its SSL certificate — which is the same request your browser would make. There's no ToolKit server involved, and the ads in the app never receive the links you scan.
How does ToolKit tell if a link is phishing?
It looks at the structure of the URL: IP addresses used instead of domain names, lookalike characters (punycode), brand names in the wrong place, link shorteners, risky file extensions and domain endings that are often abused. It also traces every redirect so you see where the link really ends up.
What does the Scam Message Detector do?
Paste an SMS, WhatsApp or email message — or share it to ToolKit from any app — and it checks the text for the tricks scam messages rely on: requests for an OTP or PIN, "your account will be blocked" threats, prizes, easy-money jobs, payment demands, urgency and fake bank or courier names, in English, Hindi and Hinglish. It also finds the links in the message so you can scan each one. The message is analysed on your phone and is never sent anywhere.
Can ToolKit tell me a UPI QR code is safe to pay?
No, and it will never say so. UPI QR Check reads the QR picture you choose from your gallery and shows who it says you would pay — name, UPI ID, amount and note — with colour-coded warnings for anything odd. The name in a QR is written by whoever made it and is not verified by a bank, so always match the name shown in your payment app before you pay. ToolKit never makes payments itself; it only opens the payment in your UPI app when you tap the button.
How do I check a link or message from another app?
Select the link or message text and choose Verify with ToolKit from the menu, or tap Share and pick Verify with ToolKit. A link opens in the scanner; a longer message opens in the Scam Message Detector.
Does ToolKit work in Hindi?
Yes. Use the English / हिन्दी switch at the top right of any screen. ToolKit remembers your choice the next time you open it.
Can ToolKit guarantee a link is safe?
No tool can. ToolKit's checks are pattern-based, so treat the verdict as a strong second opinion, not a promise. If something feels off, don't open it.
Is ToolKit free?
Yes. There's no subscription and no account. ToolKit is paid for by ads from Google: banners on its screens, plus a short video ad you choose to watch between scan steps. You download it from Google Play and start scanning.
Which Android versions does ToolKit support?
Android 6.0 (Marshmallow) and newer.
Ready to browse smarter?
Free, private, and on your device in under a minute.