Stop scams, spam and phishing on your platform.

Whatever your users create, a marketplace listing, a job post, a message, or an entire site built on your product, Rupt reads it for fraud and scores the account behind it.

CrexiHouzz ProManatalVyondAgorapulseSmartScoutBreaking Into Wall Streetiwd.ioSketchyTettraDesignfilesPrep101Cheddar UpNorth DataStealthWriterPharmAchieve
CrexiHouzz ProManatalVyondAgorapulseSmartScoutBreaking Into Wall Streetiwd.ioSketchyTettraDesignfilesPrep101Cheddar UpNorth DataStealthWriterPharmAchieve

Where it runs

Fraud does not only arrive as a message.

It arrives as a listing, a task, a review, or a phishing page one of your users just deployed. Rupt reads every surface your users can reach, and the same engine covers all of them.

Marketplaces and task platforms

Listings, job posts, service offers, and the leads they pull in.

  • Bait pricing that only closes by wire transfer
  • Providers harvesting contact and bank details
  • Deposits demanded before anyone is verified
  • Task posts written to farm identity documents

Products your users build on

The sites, apps and pages they ship on your infrastructure.

  • Login screens cloned from banks and known brands
  • Wallet drainers sitting behind a launch page
  • Storefronts built only to collect card details
  • Impersonation running on your subdomain

User to user communication

Direct messages, chat, comments and reviews between your users.

  • Social engineering toward sensitive information
  • Advance fee, romance and investment scams
  • Credential harvesting links dressed as support
  • Pressure to continue on WhatsApp or Telegram

Platforms that stopped treating every account as trustworthy:

Verification, screening and abuse prevention, rolled out without the friction their teams were bracing for.

How Crexi stopped sharing without the friction it feared

“They saw it as a feature, not friction.”

Read the story Data & Marketplaces

Sketchy converted 20% of sharers in the first 3 months

20%

Converted on day one

Read the story E-learning

How Agorapulse uncovered $1M+ in ARR lost to account sharing

$1M+

ARR found in shared seats

Read the story SaaS

How StealthWriter doubled its growth rate by monetizing sharers

2x

Growth rate after Rupt

Read the story AI

The engine

Built for the scams that read as legitimate.

Obvious spam is easy. Rupt is aimed at the operator who writes clean copy, prices the listing plausibly, and passes every check you already run.

1Detect

An AI that reads for intent, not for keywords.

A sophisticated scam contains no banned words. It is a plausible offer with an implausible way to pay, or a login page that is perfect apart from the domain. Rupt reads what the content is actually trying to get someone to do.

Moderation /Detections
Live

Caught in the last hour

ListingBelow market, wire transfer onlyScam
SiteBank login cloned on a subdomainPhishing
MessageDeposit first, then we move to WhatsAppScam
TaskUpload your passport to applyFraud
ReviewSame praise, nine listingsSpam
ListingTwo bed, available FridayClean

The operator, not the post

SignalThis oneNormal
Same browser fingerprint191
Same origin IP181
Reused throwaway number61
Items posted per day50+3
Naming pattern match700
Automation detectedNoneNone

What your policy did

HoldNever reaches your users
ReviewQueued with the evidence
ChallengeAuthor verifies by SMS
Link19 sibling accounts flagged
AllowClean author, no delay
surface covered
Every surface covered
to a verdict
<1s to a verdict
languages
30+ languages

2Link

The post is the symptom. The operator is the problem.

Take one listing down and it is back tomorrow under a new account. So Rupt scores the author too, on device, email, phone and network, and links them to every other identity the same person is running.

Moderation /Operator
Live

Caught in the last hour

ListingBelow market, wire transfer onlyScam
SiteBank login cloned on a subdomainPhishing
MessageDeposit first, then we move to WhatsAppScam
TaskUpload your passport to applyFraud
ReviewSame praise, nine listingsSpam
ListingTwo bed, available FridayClean

The operator, not the post

SignalThis oneNormal
Same browser fingerprint191
Same origin IP181
Reused throwaway number61
Items posted per day50+3
Naming pattern match700
Automation detectedNoneNone

What your policy did

HoldNever reaches your users
ReviewQueued with the evidence
ChallengeAuthor verifies by SMS
Link19 sibling accounts flagged
AllowClean author, no delay
identities linked
19 identities linked
actor signals
40+ actor signals
bot signals needed
0 bot signals needed

3Act

You decide what a verdict is worth.

Hold it before anyone sees it, queue it with the evidence attached, make the author verify by SMS, or take down the whole ring at once. Set the bar per surface, so a first review is treated differently from a first payment request.

Moderation /Policy
Live

Caught in the last hour

ListingBelow market, wire transfer onlyScam
SiteBank login cloned on a subdomainPhishing
MessageDeposit first, then we move to WhatsAppScam
TaskUpload your passport to applyFraud
ReviewSame praise, nine listingsSpam
ListingTwo bed, available FridayClean

The operator, not the post

SignalThis oneNormal
Same browser fingerprint191
Same origin IP181
Reused throwaway number61
Items posted per day50+3
Naming pattern match700
Automation detectedNoneNone

What your policy did

HoldNever reaches your users
ReviewQueued with the evidence
ChallengeAuthor verifies by SMS
Link19 sibling accounts flagged
AllowClean author, no delay
actions available
5 actions available
surface thresholds
Per surface thresholds
releases from you
0 releases from you

A real case

The scam that no content filter was ever going to catch.

One person spent five months on a marketplace, building a fresh identity almost every day and using it to scam the providers there. He wrote every message by hand, so there was nothing automated to detect and nothing repetitive to match.

How it ran

  1. 1

    Signed up

    A real inbox he opened himself, and a phone number on an area code that does not exist. Email 2FA was no obstacle.

  2. 2

    Bought a burner

    When the marketplace started demanding a verified number, he moved to an SMS-only line. Real carrier, voice switched off.

  3. 3

    Rotated networks

    A fresh IP every few days, then commercial VPN exits once he got careful.

  4. 4

    Spammed the providers

    Fifty or more messages a day chasing card and bank details, until enough people complained and the account was banned.

  5. 5

    Started over tomorrow

    One new identity almost every day, for five months. One a day never trips a velocity rule.

Already running, all silent

Email verificationPassed

Real inboxes at Gmail, mail.com and Tuta.

Phone verificationPassed

Valid, active, mobile, low risk on every lookup.

Bot detectionPassed

No webdriver, no headless, nothing automated.

What actually caught him

SignalHimNormal
Identities per browser191
Identities per origin IP181
Identities per throwaway number61
Fingerprint reuse at challenge351

One fingerprint carried nineteen identities. That fingerprint pointed at an IP carrying eighteen separate signups, where every other address from the same country carried exactly one. From there the naming pattern gave up the remaining seventy accounts.

Read the full breakdown

Why it holds up

One signal is an opinion. Four is a case.

A tool that only reads the text has to decide from the text alone, so it either misses the careful scammer or buries your queue in false positives. Rupt already knows the device, the email and the network, and weighs all of it on the same request.

  • Content intelligence

    What the content is trying to get someone to do. Payment off platform, a lookalike login page, a listing priced to bait, a bio lifted from a real broker.

  • Device intelligence

    How many identities one browser has carried, whether this device already owns accounts you banned, and whether it is a person or a script.

  • Email intelligence

    Disposable and freshly registered domains, addresses with no sending history, and inboxes that already appear on accounts you removed.

  • IP intelligence

    Datacenter ranges, commercial VPN exits, residential proxies, abuse reports, and how many separate signups one address is quietly carrying.

Evidencedave.realty.94
Content+34
  • Off-platform contact
  • Upfront payment request
Device+28
  • 19 identities, one fingerprint
  • Seen on 6 banned accounts
Email+12
  • Domain registered 4 days ago
  • No prior sending history
Network+18
  • Commercial VPN exit
  • 18 signups from this IP
Risk score 92 Blocked

Questions teams ask before turning on scam and spam prevention:

Find out what is already running on your platform.

Rupt reads every surface from day one and links authors from their first signup. Most teams see the real shape of the scam and spam traffic on their platform within a week, before they hold or remove anything.