Journal
BRUH Updates6 min

Is This Text a Scam? How to Spot Fake Job Offers and Phishing

Meet Scam Shield, a new BRUH+ member feature

By BRUH

Almost everyone gets the same messages. A recruiter from an enormous company writes to you from a Gmail address. "Watch videos 30 to 60 minutes a day, $200 to $600 daily, paid every day." A text says a package is held and a $1.99 redelivery fee is due. A bank "fraud team" calls and asks you to read back the six-digit code they just sent.

If you have seen these a hundred times, they are obvious. If you are job hunting, or tired, or it is the third message that day, they are not obvious at all. That is the whole design.

The patterns worth knowing

Pay promises that skip the interview. Real employers do not commit to a daily salary before they know your name. Guaranteed returns, daily payouts and money for trivially easy work are the oldest tell there is.

Free mailboxes wearing a company's clothes. A hiring message about YouTube, Amazon or a bank that arrives from Gmail, Outlook or a random webmail domain is one of the strongest fake-job signals.

Lookalike and throwaway domains. usps-track.delivery-fee.top is not USPS. Read the link as text, left to right, and look at the actual registered domain instead of the words in front of it.

Manufactured urgency. Final notice. Within 24 hours. Your account will be suspended. Urgency exists to stop you from checking.

Requests for the things that end badly. Verification codes, gift cards, a "small deposit", ID photos, a wallet address. No legitimate company asks for a one-time code, ever.

What to actually do

Do not reply, even to say no — a reply confirms a live number. Do not tap the link. Verify through a channel you chose yourself: type the company's real address into your browser, or call the number on the back of your card. Report and delete. If money already moved, contact your bank first, then file with the FTC at reportfraud.ftc.gov.

Scam Shield: 2 free checks, then BRUH+

We built the check into the app. Scam Shield lives inside the app: paste the message, optionally add the sender address and what kind of message it is, and it lists the specific red flags it matched, what each one means, a low / suspicious / high reading, the likely scam type, and what to do next.

A few things about how it works, because they matter more than the feature itself:

  • The analysis runs entirely on your own device. The message and sender are never uploaded, saved, logged or sent to analytics.
  • It never opens, fetches or previews links in your message. It only reads them as text.
  • No AI is involved. The checks are a fixed, transparent list of documented scam patterns.
  • It is a pattern check, never a verdict. A low reading is not a clearance, and nothing can confirm who really sent a message.

Scam Shield needs a BRUH account. Try 2 checks free with a BRUH account. BRUH+ required after that — I would rather say that plainly than bury it. If you are a member, open it from your profile. If you are not, there is a plain explainer page at heybruh.app/scam-shield, and BRUH+ is $7.99 a month or $49.99 a year.

Our 12 free tools still need no account at all, including the printable meetup safety checklist. Scam Shield is the one that lives inside the app with BRUH+.

The reason it belongs in BRUH at all is simple: this is an app for adults 18+ who want real friends and real plans locally, all genders, platonic. Meeting new people means messages from people you do not know yet. Being able to read a bad one quickly is part of that.

  • #scams
  • #safety
  • #bruh-plus
  • #phishing
  • #job-scams

Know someone who needs this?

Keep reading