Your security advisor: expert advice before you click, sign in or send money

The on-device warnings are free for personal, non-commercial home use. Plus adds the optional AI check and Ask Gmork for $4 a month or $40 a year, and Family is $8 a month or $80 a year for up to 5 people. Try either free for 14 days, no card needed. Businesses need a Workplace plan.

No. Free, Plus and Family are for personal, non-commercial home use. Using Gmork in a business, a practice, a nonprofit office or any other commercial setting needs a Workplace plan, including offices of 1 to 5 people. Workplace starts at 5 seats for $25 a month and you can try it free for 14 days, no card needed. It adds AI on every seat, HIPAA-safe mode, a seat dashboard and settings staff can’t turn off.

Only the one email you have open in Gmail or Outlook on the web, or the latest incoming messages in the chat you have open in Messenger, WhatsApp Web or Google Voice. It checks them on your computer and never reads what you type. Your emails and chats never leave your computer unless you turn on the optional AI check. Then a cleaned-up copy of that email or those messages, with email addresses, phone numbers and long numbers removed, is sent through gmork.com for a second opinion.

No. On sign-in and payment pages Gmork reads the page itself (the title, the logo text, where the form sends your details) to spot fakes. It never reads what you type into the boxes.

Only counters. Once a day Gmork sends how many warnings it showed (by level and type) and how often you tapped “helpful”, “annoying” or “I changed what I was going to do”, with the extension version, language and plan. You can turn this off in Settings. With the AI check on, gmork.com also counts how many checks each install made and how much AI time they used. gmork.com never stores your messages, the websites you visit or who writes to you. The AI provider (OpenAI) may keep the request for up to 30 days to check for abuse, and then deletes it.

No. Gmork catches many common tricks, but scammers change their stories all the time. Treat it as expert advice, not a guarantee. If something feels wrong, stop and check with someone you trust, even if Gmork says nothing.

No one can tell that from the message alone, and Gmork doesn't try. It looks at what the message asks for. A new number, an urgent money request and “don’t tell anyone” together are a common pattern, so Gmork suggests calling them on the number you already have.

Facebook Messenger (messenger.com and chats on facebook.com), WhatsApp Web and Google Voice texts, when you use them in Chrome or Edge on a computer. It checks messages in 13 languages (plus Russian), and only the incoming messages in the chat you have open. It never reads what you type.

Because gift cards are how most impersonation scams get paid. No real company, government agency or family emergency asks to be paid in gift cards. If you're buying one as a present, tap “I'm buying this as a gift for someone I know” and Gmork stays quiet on that shop until you close the browser.

Not yet. Gmork Scam Guard works in Google Chrome and Microsoft Edge on a Windows, Mac, Chromebook or Linux computer. Phone and tablet apps are not covered, including WhatsApp, Messenger and Google Voice on your phone, and neither are desktop programs such as the Outlook app or the WhatsApp app.

Yes. Open the Gmork Scam Guard page in the Chrome Web Store and click “Add to Chrome”. Microsoft Edge can install it from the same page: click “Allow extensions from other stores” first. Chrome and Edge keep it up to date automatically. IT teams can still use a zip for a manual install, linked in the install section of this page.

That is Chrome's standard wording for any extension that checks the pages you visit. Gmork needs it to notice a fake sign-in page or a risky link wherever it appears. Gmork doesn't save your browsing history, screenshots or passwords. It only keeps a short list of the warnings it showed you, on your own computer.

Yes. Click the fox in the toolbar and pause for 5 minutes, 15 minutes or until you turn it back on. You can also add sites Gmork should never look at, like your doctor's portal.

Yes. Workplace plans include HIPAA-safe mode for healthcare offices. The plan owner turns it on once in the Scam Guard dashboard and it applies to every browser on the license; staff can't switch it off. With it on, the AI check and Ask Gmork are off and only the built-in local rules run on each computer. The only things that leave the browser are bare domain names (like example.com) for sender and link checks, and the daily warning counts. Gmork's server also refuses AI requests from those browsers. What it doesn't do: HIPAA-safe mode is not a HIPAA certification and doesn't make your office compliant on its own. A Business Associate Agreement (BAA) is required before any AI use with patient health information (PHI). Check with your compliance officer before you roll it out.