Is this payment request real?
Many scams need nothing more than a convincing email: "We changed our bank details, please send this invoice to the new account." Paste the email, invoice or chat message that asks you to pay, and we check it for the most common giveaways.
What we look at
Is the sender who they say?
The name says one company but the mail came from another domain, replies go to a different mailbox, or authentication failed. Pasting the original email with headers makes this part much stronger.
Are the links phishing?
Whether the links are on phishing lists, imitate a brand you know, or show one address while opening another.
Is the payee address flagged?
Whether any wallet address in the message is on a sanctions, scam or hack list, and whether it differs from the address they used before.
Is the wording pushing you?
Pay right now, keep this quiet, our bank details changed, buy gift cards, or hidden instructions aimed at an AI assistant.
How to copy the original email
Gmail: open the email, click the three dots at the top right, choose "Show original" and copy everything. Outlook: open the email, then "…" → "View" → "View message source". Apple Mail: "View" → "Message" → "Raw Source".
Pasting only the body still works, but then the sender cannot be verified.
What this cannot tell you
No warning signs does not mean the message is genuine. A scammer's new domain or new wallet may not be on any list yet. For a large payment, a call or email to a contact you already know beats any check.
What you paste is used for this check only. We do not store or log it.
HTTP
POST https://oceanalt.com/api/payment-request
Send headers, from, subject, body and so on, or post the whole message as text/plain. Returns allow, review or decline.
MCP
claude mcp add --transport http oceanalt https://oceanalt.com/api/mcp
Tool name check_payment_request.