ScamShield AI Private Limited
ScamShield AI is an AI-powered fraud-detection company for Indian SMEs and CA firms, registered in Ahmedabad, Gujarat, and recognized by DPIIT under the Startup India initiative. This page is for investors, partners and reviewers who need the detail a customer never does: who is behind it, the scale of the problem, our recognition and registration, and how we handle data.
What ScamShield AI does
ScamShield AI checks emails, WhatsApp messages, payment screenshots, links, UPI IDs, GST numbers and call recordings for signs of fraud and returns a risk verdict with a plain-language reason, usually in under three seconds. It is built for the fraud that reaches an Indian business as ordinary correspondence: a fake GST demand notice, a supplier who emails new bank details before a payment run, a buyer’s forged “payment successful” screenshot, or a caller impersonating the CBI.
It ships as inbox protection (Gmail today; Zoho Mail and Microsoft 365 coming soon), a WhatsApp channel a non-technical team can use by forwarding a message, a universal scanner in the dashboard, a browser extension, and a set of free, no-signup checkers that run entirely in the visitor’s browser. Detection combines a transformer text model, a classical classifier and a deterministic rule engine with India-specific heuristics, covering 14 fraud categories with Hindi and Gujarati coverage. It is not antivirus and not a firewall.
The scale of the problem
The same figures we show buyers as risk are, for an investor or grant reviewer, the size of the problem ScamShield AI is built against. Each is from a public source; we do not publish our own market-size estimates.
₹58,772 crore in fake GST invoices
₹58,772 crore of suspected bogus billing across more than 24,000 fake GST invoice cases were uncovered by Indian authorities in FY2025-26, per data shared in Rajya Sabha. Genuine businesses that transacted with those vendors face demand notices and ITC reversals they did nothing to cause.
13.42 lakh UPI fraud cases in a year
13.42 lakh UPI fraud cases and ₹1,087 crore in losses were recorded in India in FY24, per data shared in Parliament by the Finance Ministry. ₹485 crore more was lost across 6.32 lakh incidents in the first six months of FY25 alone.
Under 6% of stolen money recovered
Recovery rates remain below 6% of the stolen amount, per government data for April to September 2025. Once a UPI or NEFT payment has left an SME’s account, it is almost never coming back; prevention is the only economic answer.
9% of cybercrime losses from “digital arrest”
Digital arrest scams accounted for an estimated 9% of India’s cybercrime losses in 2025. Fake digital identities compiled from genuine and fabricated information rose 450% between 2022 and 2025, per NASSCOM and DSCI research, which is the infrastructure behind convincing forged notices, IDs and screenshots.
Who is behind it
Darshil Thummar · Co-Founder & CTO
MSc in Information Security and Digital Forensics. Worked for years in cybersecurity and digital forensics in the UK, and volunteered with The Cyber Helpline supporting people after they had been scammed. Moved back to Ahmedabad to build detection for the fraud Indian SMEs actually receive. Darshil is also the company’s Data Protection Officer and Grievance Officer under the DPDP Act 2023. Why he built this, in his own words →
Jay Hirpara · Co-Founder & CEO
Leads go-to-market, business development, and CA-firm partnerships.
Recognition and registration
DPIIT-recognized startup
ScamShield AI Private Limited holds a Certificate of Recognition from the Department for Promotion of Industry and Internal Trade (DPIIT), Ministry of Commerce & Industry, Government of India, under the Startup India initiative. Certificate No. DIPP277364, issued 13 August 2026. Recognized sector and industry: IT Services / Application Development. Verify this certificate on the Startup India portal.
Registered in India, servers in India
ScamShield AI Private Limited, registered office at 32, Bhaktinandan Shopping, Bapasitaram Chowk, Krishnanagar, Ahmedabad 382345, Gujarat, India. Our servers and database run on Microsoft Azure Central India; masked message content sent to Anthropic for Component D scanning, emails delivered through Resend, and the other services our privacy policy lists are processed outside India. GST-compliant invoicing as standard.
What we do not claim
We are not a government service and are not affiliated with CBIC, the GST Network or any bank. Traction figures are published only once verified; none are listed on this page yet.
Compliance and data posture
DPDP Act 2023, built in
Scanning never writes email bodies to our database, only the fraud verdict and detection metadata; an email you choose to report is kept inside its cybercrime evidence pack for up to 12 months (24 if extended for an ongoing case). Phone numbers are stored as a keyed hash, never in plain text. Audio is deleted within minutes of analysis. A deletion request is completed within 30 days, except the records our privacy policy lists.
Data residency
Our servers and database run on Azure Central India. Some of our service providers process data outside India, for example masked message content sent to Anthropic for Component D scanning and transactional emails delivered through Resend. Our privacy policy lists every provider, what it receives, where and when.
Named accountability
Grievance Officer: privacy@scamshieldai.in, 72-hour response. Security disclosures: security@scamshieldai.in, never a public issue tracker. Breach notification to affected customers and, where required, the Data Protection Board of India.
Written commitments
Privacy policy · Terms of service · Service level agreement (99.5% monthly availability target) · Refund policy.
Stated limits
No fraud detector catches everything and sophisticated attacks may bypass detection; the free GSTIN check is structural, not a live registry lookup; voice analysis is rule-based acoustic analysis, not a trained model. We would rather a reviewer read these here than discover them later.
Public benefit
Most of what fraud costs an SME is never recovered, so the value is in the loss that never happens. Several parts of ScamShield AI are free and need no account, by design.
- Free checkers, no signup, nothing sent to a server. The GSTIN checker, GST notice checker, GSTIN-PAN consistency check and vendor invoice check run entirely in the visitor’s browser and are open to anyone.
- Vernacular access. Detection covers Hindi and Gujarati, and the GST notice checker is published in Hindi at /hi/gst-notice-checker, for the trading firms and manufacturers who do not correspond in English.
- Reaching non-technical staff. The WhatsApp channel needs no app and nothing to learn: if a member of staff can forward a message, they can check it. Gamified fraud-awareness training keeps a whole team alert, not just the accounts desk.
- Help after the fact. Free, forwardable guidance on what to do in the first 10 minutes after a fraud, including reporting on cybercrime.gov.in and the 1930 helpline, and checklists a CA can send a client the moment something looks off.
- Sector and reach. Recognized sector: IT Services / Application Development. Customers are Indian SMEs and the CA firms that manage dozens of them, so one deployment at a CA firm protects many businesses at once.
Talk to the founders.
Investor, partnership, press or scheme enquiries: write to investors@scamshieldai.in; a founder replies within one business day. ScamShield AI Private Limited, Ahmedabad, Gujarat, India · LinkedIn.
