How a verdict happens

Behind the scenes, your screenshot moves through four stages in a few seconds.

Read

moat extracts every line of on-screen text from the image and screens out interface noise like clocks and battery icons. It also tracks how confident it is in each line: if a screenshot is too blurry to read reliably, moat says so instead of guessing.

Extract

From that text it pulls the pieces that matter: links, email addresses, phone numbers, money amounts, and deadlines. Each one stays tied to its exact spot in the image, so anything flagged later can be pointed at, not just described.

Check

Suspicious pieces are checked against the live web: whether a domain really belongs to the brand it imitates, whether the sender matches who it claims to be, and whether the wording matches scam campaigns in circulation right now.

Decide

The gathered evidence is weighed into one verdict, safe, suspicious, or malicious, with the reasons spelled out in plain language and the risky parts highlighted on your screenshot.