Fake logins and lures
Mail that copies a brand to steal a password. Muse Wonder opens the link in a sealed browser and shows you exactly where your password would have gone.
For South African small businesses
Forward any suspicious email, invoice or proof of payment. You get a clear verdict and the evidence behind it, from an investigator built on Meta's Muse models.
Forward it, as an attachment, tocheck@isitlegit.co.za
Sign up first: we answer mail from the address or domain you verify.
Or upload a file · Free during launch · No card needed
A prewritten example on a fictional email, not a live analysis: nothing runs when you open this, and nothing is sent or stored. The email: "Updated banking details" from accounts@fynbos-freight.example, with invoice-2087.pdf attached.
Verdict: Malicious. Phone Fynbos Freight on the number in your own records before you pay anything. A real check needs sign-up first.
Malicious
The bank details on this invoice are not Fynbos Freight's.
What to do now
Phone Fynbos Freight on the number in your own records before you pay anything.
Why
E4The account number differs from the one Fynbos Freight registered.
E2Sent from fynbos-freight.example, registered 6 days ago.
E6The PDF was edited after it was created.
Digital banking fraud in South Africa, 2025
in reported client claims, up 29.2% on 2024
incidents, more than double the 52,588 of 2023
lost on average, per incident
"In business environments, supplier mandate fraud and business email compromise remained material risks. Criminals redirected payments through fraudulent changes to banking details, falsified supplier information, or compromised communications."
Source: South African Banking Risk Information Centre (SABRIC), Annual Crime Statistics 2025, pages 3 and 7: digital banking fraud client claims reported to its nine participating banks in 2025, for individuals and businesses. Read the report
By Derick Payne, Rizonetech · Reviewed 31 Oct 2026. I read each report myself and checked every figure on this page against the page it comes from.
What it catches
Mail that copies a brand to steal a password. Muse Wonder opens the link in a sealed browser and shows you exactly where your password would have gone.
Business email compromise cost victims more than US$3 billion in 2025, across 24,768 complaints reported to the FBI's IC3. FBI IC3, 2025 IC3 Annual Report. INTERPOL reports that it hits "organizations of all sizes, from small and medium-sized enterprises to large corporations" in Africa. Africa Cyberthreat Assessment Report 2025.
How it works
From Outlook or Gmail to check@isitlegit.co.za, so the original headers come along. Or upload the file.
Sign up first: we answer mail from the address or domain you verify.
Sender authentication, lookalike domains, links, attachments and hidden text.
Safe, suspicious or malicious, the top three reasons, and what to do now. Every reason links to its evidence.
Muse Spark
Reads the email, the invoice and the landing page, then weighs the evidence and writes the cited verdict.
Muse Wonder
Walks the suspicious link in a contained browser, typing only harmless test values.
Muse Voice Transcribe
Turns a voice note from a "director" into words we can check.
Protect your business
Register your real domains, logo and bank account.
How protection worksMeasured, not claimed
Every release is tested on 160 labelled samples. Detection rate, false alarms, speed and cost are on the results page, with what each Meta model adds. Latest run: 2026-11-02.
Free during launch. Protect from R499 per month after launch.