Changed presentation
Four fictional report families use different names and wording, with varied formatting of their shared identifiers.
THE INVESTIGATION WORKSPACE
Different names. Familiar patterns. Find what connects them.
Identifier connections across independent reports
Add a message or screenshot to trace its identifiers.
Source material, kept in view.
ON-DEVICE INTELLIGENCE
Neural similarity surfaces narrative leads. It never creates confirmed graph connections.
THE EVIDENCE REGISTER
Review, correct, and trace every item in your workspace.
| Report | Channel | Identifiers | Connection status | Added |
|---|
MEASURED, NOT ASSUMED
A reproducible synthetic benchmark with difficult negative examples.
Four fictional report families use different names and wording, with varied formatting of their shared identifiers.
Unrelated offers share public form hosts and administrative email addresses. Those overlaps must not create corroborated groups.
Separate automated tests check duplicate suppression, OCR review gates, source validation, imports, and connection retraction.
No trained classifier is evaluated here. The baseline links any raw identifier overlap; ScamTrace requires reviewed, source-grounded evidence and corroboration.
A CLEAR CHAIN OF EVIDENCE
ScamTrace connects reports. It does not pronounce people guilty.
Paste a message or read a screenshot with Tesseract OCR. Screenshot identifiers stay out of confirmed connections until you review their readings.
A shared payment destination, or both a shared email and phone, supports a corroborated report group. Other overlaps remain visible supporting leads. Public form hosts are excluded.
Correct or exclude any extracted field. Connections and groups are recalculated immediately. Reposted content is counted once, using a normalized SHA-256 fingerprint.
Tesseract reads image text. A quantized MiniLM model produces semantic embeddings in a browser worker; cosine similarity surfaces related narratives separately from the identifier graph. Identifier extraction and connection policies are transparent deterministic code.
Reports are user-supplied and unverified. A shared account establishes a shared destination, not a shared operator or proven fraud. Similar language is a weak lead. No connections found means insufficient evidence, not a safe offer.
Evidence is stored in this browser’s IndexedDB. Text and screenshots are not uploaded to a server. Model files and fonts download from external providers. Export a case to back it up or share it intentionally; exported files can contain sensitive identifiers.