Skip to content
IsItLegit home

For South African small businesses

Is it legit?
Ask before you pay.

Forward any suspicious email, invoice or proof of payment. You get a clear verdict and the evidence behind it, from an investigator built on Meta's Muse models.

Forward it, as an attachment, tocheck@isitlegit.co.za

Sign up first: we answer mail from the address or domain you verify.

Or upload a file · Free during launch · No card needed

See a sample check

A prewritten example on a fictional email, not a live analysis: nothing runs when you open this, and nothing is sent or stored. The email: "Updated banking details" from accounts@fynbos-freight.example, with invoice-2087.pdf attached.

  1. Who sent it. E2Sent from fynbos-freight.example, registered 6 days ago.
  2. The PDF. E6The PDF was edited after it was created.
  3. The bank account. E4The account number differs from the one Fynbos Freight registered.

Verdict: Malicious. Phone Fynbos Freight on the number in your own records before you pay anything. A real check needs sign-up first.

Malicious

The bank details on this invoice are not Fynbos Freight's.

What to do now

Phone Fynbos Freight on the number in your own records before you pay anything.

Why

E4The account number differs from the one Fynbos Freight registered.

E2Sent from fynbos-freight.example, registered 6 days ago.

E6The PDF was edited after it was created.

A sample report on fictional companies

Digital banking fraud in South Africa, 2025

Fraud is growing, and it works by fooling people, not by breaking into banks.

R2.4 billion

in reported client claims, up 29.2% on 2024

110,074

incidents, more than double the 52,588 of 2023

R21,865

lost on average, per incident

"In business environments, supplier mandate fraud and business email compromise remained material risks. Criminals redirected payments through fraudulent changes to banking details, falsified supplier information, or compromised communications."

SABRIC, Annual Crime Statistics 2025, page 9

Source: South African Banking Risk Information Centre (SABRIC), Annual Crime Statistics 2025, pages 3 and 7: digital banking fraud client claims reported to its nine participating banks in 2025, for individuals and businesses. Read the report

By Derick Payne, Rizonetech · Reviewed 31 Oct 2026. I read each report myself and checked every figure on this page against the page it comes from.

What it catches

Scams that cost small businesses the most.

Phishing

Fake logins and lures

Mail that copies a brand to steal a password. Muse Wonder opens the link in a sealed browser and shows you exactly where your password would have gone.

Business email compromise cost victims more than US$3 billion in 2025, across 24,768 complaints reported to the FBI's IC3. FBI IC3, 2025 IC3 Annual Report. INTERPOL reports that it hits "organizations of all sizes, from small and medium-sized enterprises to large corporations" in Africa. Africa Cyberthreat Assessment Report 2025.

How it works

Forward. We investigate. You get the answer, with proof.

  1. Forward as an attachment

    From Outlook or Gmail to check@isitlegit.co.za, so the original headers come along. Or upload the file.

    Sign up first: we answer mail from the address or domain you verify.

  2. Checks first, then Meta's models

    Sender authentication, lookalike domains, links, attachments and hidden text.

  3. A verdict you can check

    Safe, suspicious or malicious, the top three reasons, and what to do now. Every reason links to its evidence.

Muse Spark

Reads the email, the invoice and the landing page, then weighs the evidence and writes the cited verdict.

Muse Wonder

Walks the suspicious link in a contained browser, typing only harmless test values.

Muse Voice Transcribe

Turns a voice note from a "director" into words we can check.

How it works

Protect your business

Scammers use your name too. Make it checkable.

The IsItLegit Protected sealProtected by IsItLegit signature badge

Register your real domains, logo and bank account.

How protection works

Measured, not claimed

We publish how often we are right.

Every release is tested on 160 labelled samples. Detection rate, false alarms, speed and cost are on the results page, with what each Meta model adds. Latest run: 2026-11-02.

11.1%

phishing caught

0%

false alarms

7 s

median to verdict

The next fake invoice is already on its way. Check it first.

Free during launch. Protect from R499 per month after launch.