Share

Scam Check and Recovery : Check, Report and Lock Down

Trilly Original

Says if a message looks like a scam and, if money or details went, the steps in order: the bank, lock-down, the official report, the claim, a 30-day watch.

Free

Add to my AI

Free to add. Updates arrive by themselves.

Example, shortened, from this skill's page. Someone asks their AI: My mom (79, Dayton OH) got a text yesterday that looked like it was her bank, tapped the link… Scam Check and Recovery answers: Do these today, in order: Call the bank back with your mom, on the number on the back of her card. Report to the FTC at ReportFraud, and to the National Elder Fraud…; Ask the bank whether to freeze her credit. A freeze is free at…; The bank should decide within about 10 business days of her notice. If….

Says if a message looks like a scam and, if money or details went, the steps in order: the bank, lock-down, the official report, the claim, a 30-day watch.

  • For ageing parents, carers and seniors
  • Claude, ChatGPT, Gemini and more
  • Worldwide: works in any country
  • Trilly approved this version

This skill gives general information, not financial advice. Check anything important with a licensed adviser.

See the difference. Same question, two answers.

Show the answer

Trilly ran this request on an AI, with and without the skill, and picked this pair. It's an example, not a measured test.

The whole example

You ask

My mom (79, Dayton OH) got a text yesterday that looked like it was her bank, tapped the link and typed in her debit card number and the code they texted her. Today there are 3 charges on her checking, $1,186.40 total. Her card is still in her purse. I called the bank with her and the guy said since she gave out the number she's liable for up to $500. Also some 'advisor' called her this morning saying she should move her savings into gold to keep it safe from the hackers. Should she? She's really shaken. What do we do?

Without the skill

Hannah, I'm sorry. Here's the plan. Short answer: no gold. That call is almost certainly the second stage of the same scam (a "recovery/safe-haven" follow-up). Don't call that person back or share anything.

Today

  1. Card: Ask the bank to cancel and reissue the debit card (the number is compromised even though the card is in her purse). Have them block the 3 charges and any pending ones.
  2. Online banking: Change her password, add or reset 2FA, and have the bank flag the account for fraud. Consider a new account number if the charges were ACH-type.
  3. Phone: Don't reply to or click anything further. Block the scam caller. Tell her the bank will never ask her to move money.
  4. Report: ReportFraud.ftc.gov, ic3.gov, and a Dayton police report (non-emergency line). A report number helps with the dispute.
  5. Credit freeze: Freeze her credit at Equifax, Experian, and TransUnion (free). Place a fraud alert too.

About the $500 claim: That's not the whole story. Under Regulation E, liability for unauthorized debit transactions depends on how fast she reports (generally $50 if within 2 business days of learning of it, up to $500 after). She reported within a day or so, so $50 is the likely cap. Tricking someone into giving a code is often still treated as unauthorized. Ask for a written dispute and a claim number, and don't accept the verbal answer.

Next 30 days (through about November 20, 2026)

  • Check her checking and savings every day for the first week, then every few days.
  • Set up transaction alerts for every transaction.
  • Watch for new accounts, mail from unknown lenders, or Social Security/Medicare oddities.
  • Keep a log: dates, names, claim numbers.
  • Follow up on the bank's investigation; written results are typically due within 10 business days (provisional credit may follow).

Draft message to the bank (send via secure message or certified mail):

(answer cut for length)

With the skill

SCAM CHECK

Do these today, in order:

  1. Call the bank back with your mom, on the number on the back of her card. Ask for the card to be blocked and reissued, the three charges ($1,186.40) disputed as unauthorized, and a reference number, the rep's name and the date they'll answer in writing. Say that the card was never lost or stolen, only the number was used.
  2. Lock down her accounts. From a device the scammer never touched, she changes her online banking password and email password, turns on two-step sign-in, and signs out other devices.
  3. Don't move any money, and don't take that advisor's calls. Moving savings into gold "to keep it safe" is a common second scam. If she's on the phone with them again, she hangs up. Her bank will never ask her to move savings.

The $500 claim is wrong for her situation. The $50 and $500 limits apply when a debit card is lost or stolen. Her card is in her purse and only the number was used. Under the FTC's guidance, she isn't responsible for charges she didn't authorize if the bank is told within 60 calendar days after the statement showing them is sent. She told them within a day or two. The CFPB also treats a transfer made after someone is tricked into sharing account details as unauthorized, and her mistake can't be used to make her pay more. If the bank still says she owes money, ask for it in writing and escalate. I can't promise the outcome, since the bank decides first.

The text and the "advisor" call are both likely scams. No one is to blame for falling for a convincing text.

Next steps

  • Report to the FTC at ReportFraud, and to the National Elder Fraud Hotline (free, weekdays 10 am to 6 pm Eastern) for help with reporting.
  • Ask the bank whether to freeze her credit. A freeze is free at Equifax, Experian and TransUnion, and it's sensible if any ID details were shared.
  • The bank should decide within about 10 business days of her notice. If she reported today, that's Wednesday, November 4, 2026.
  • Watch her statements weekly through November 20, 2026, and check her credit report at the end. Ignore anyone offering to recover her money for a fee, because no genuine body charges one.

I can draft a claim letter if the bank pushes back. If you'd like, I can also give you reminder entries for the dates above, with neutral titles.

With the skill

With the skill. You ask: My mom (79, Dayton OH) got a text yesterday that looked like it was her bank, tapped the link… Scam Check and Recovery answers: The text and the "advisor" call are both likely scams. No one is to blame for falling for a convincing text.

Without the skill

Without the skill. You ask: My mom (79, Dayton OH) got a text yesterday that looked like it was her bank, tapped the link… The answer: Hannah, I'm sorry. Here's the plan. Short answer: no gold. That call is almost certainly the second stage of the same scam (a "recovery/safe-haven" follow-up). Don't call that person back or share anything.

How it's going, from real use.

How the numbers work

Not enough data yet

No reviews or use numbers yet. Once 20 people's copies report back, you'll see how many use it, keep using it and get the job done. The maker can't change them.

How Trilly tested it: Trilly tested version 1.0.0 on 21 October 2026. This version changed its instructions and hasn't been tested yet. What the badge means and how we test

Safety and what it can reach.

  • Reads and uses

    • Gmail or OutlookFind the scam emails and the bank's payment and alert emails to build the timeline for the bank, the report and the claim. It only reads.

    • Files you give itOnly the files you add to the chat.

    • EmailYour AI app's own tool, too.

  • Makes or changes

    • Google CalendarRemind you of the bank's answer date, the escalation date and the 30-day checks. It asks you before it changes anything.

    • Files for youIt creates files for you to keep.

    • Your accountsIt asks you before each change.

  • Never

    • Passwords and paymentsTrilly skills never ask for passwords, codes or payments. If this one does, stop and report it.

    • Running codeIt can't run code.

Risk area: money.

See every safety check

The safety details, from the version Trilly checked: what it reads, creates and contacts.

The internet
  • By itself: it contacts no websites.
  • Through apps you connect: see "Apps you've connected" below.
Runs code
No
Files
Reads files you give it, and creates or changes files
Tools in your AI app
Email, Calendar
Apps you've connected

Only if you've connected them to your AI app. It works without them too.

  • Email (for example Gmail or Outlook): Find the scam emails and the bank's payment and alert emails to build the timeline for the bank, the report and the claim. Reads: Emails from the senders or dates you name, and only the ones you pick. Links and attachments are never opened. Doesn't create or change anything. Without it: You paste the text or sends screenshots.
  • Calendar (for example Google Calendar): Remind you of the bank's answer date, the escalation date and the 30-day checks. Creates: Reminder events with neutral titles such as "Check-in", each only after a yes, showing the title and date first Asks you before it creates or changes anything. Without it: The dates come as Title, Date and Time lines, or a calendar file (.ics) if the app can make files.
Where your information goes
  • The scam messages, payment amounts, dates and payee names: Stays in the chat; you use the summary in their own call, report and claim Only the messages and payments involved. Card and account numbers are shortened to the last four digits; passwords and codes are never asked for or repeated.
  • The bank's answer date and the 30-day check dates: Your own Google Calendar, only after a yes Neutral titles such as "Check-in", with no amounts or details of the scam.
Your accounts
Takes actions in your accounts. It must ask you before each change.
Risk area
Money
What it does, in full

Written in English. Answers in your language

Paste or screenshot a text, email, letter or website. It checks for the signs of a scam without opening anything in it, and says plainly whether it looks like one.

If someone has already clicked, paid or shared details, it puts the steps in order: the call to the bank, a lock-down of email, bank and phone accounts, the official report, a credit freeze or ban where one is offered, and a claim for the money under the rule that fits how it was paid, with that rule's limits and clock. It keeps every reference number and date in a tracker, with dated checks for the next 30 days.

If Gmail or Outlook is connected it reads only the emails you pick, to build the timeline. Reminders go in Google Calendar only after you say yes. It never opens links, never asks for passwords, codes, card or bank numbers, never contacts anyone and never moves money. It gives general information, not legal or financial advice.

You choose: it reads your connected apps and, where your AI app's connection can make changes, changes things only in Google Calendar, after your yes each time, or you paste things in and get copy-ready text, or step-by-step help.

What you get

  • Ask. Works in the AI apps it's made for. Paste or upload what you have, and it does the job right there in the chat.

  • Works with your apps. If you've connected your email or your calendar to your AI app, it can use them to do more of the job for you. You choose: it works without them too, from what you paste or upload.

  • Remembers you. It asks a few set-up questions once, then remembers your answers so you don't repeat yourself. You can change them any time.

  • Works over days. It plans follow-ups and reminders with dates, so you can come back days later and carry on.

How each part works

Works with your apps.

  • Email (for example Gmail or Outlook): find the scam emails and the bank's payment and alert emails to build the timeline for the bank, the report and the claim. It only reads.
  • Calendar (for example Google Calendar): remind you of the bank's answer date, the escalation date and the 30-day checks. It asks you before it creates or changes anything.

The apps it can use

  • Email Gmail Only reads Also works with Outlook
  • Calendar Google Calendar Asks before it adds or changes anything
Choose your apps Your version: Gmail · Google Calendar · in Claude

Pick the apps you use. The map shows which steps can use them and which are copy-ready. Trilly doesn't keep your picks: they stay in this page's address. Log in to set them once for every skill.

How your apps work

Try asking

Once it's added, ask your AI something like this. Not sure it loaded? Is my skill working?

  • I got a text saying my bank account is locked and to tap a link to fix it. Is it a scam?

    To check it's working, the answer should start with "SCAM CHECK".

  • is this text a scam

  • i clicked a scam link what now

Get Scam Check and Recovery

New in version 1.0.4 (28 Oct 2026): Adds a version to paste into Grok's own skills, and sets up Grok and Grok Build.

Added through your linked AI? You already have it. Downloaded a copy? Download the new version.

Price details
  • Updates arrive by themselves.
  • Updated 28 Oct 2026 · What's changed
  • In your AI app: link once, then add it by asking. How
Scam Check and Recovery Free Add to my AI