Company

ScamShield AI Private Limited

ScamShield AI is an AI-powered fraud-detection company for Indian SMEs and CA firms, registered in Ahmedabad, Gujarat, and recognized by DPIIT under the Startup India initiative. This page is for investors, partners and reviewers who need the detail a customer never does: who is behind it, the scale of the problem, our recognition and registration, and how we handle data.

What ScamShield AI does

ScamShield AI checks emails, WhatsApp messages, payment screenshots, links, UPI IDs, GST numbers and call recordings for signs of fraud and returns a risk verdict with a plain-language reason, usually in under three seconds. It is built for the fraud that reaches an Indian business as ordinary correspondence: a fake GST demand notice, a supplier who emails new bank details before a payment run, a buyer’s forged “payment successful” screenshot, or a caller impersonating the CBI.

It ships as inbox protection (Gmail, Microsoft 365, Zoho Mail), a WhatsApp channel a non-technical team can use by forwarding a message, a universal scanner in the dashboard, a browser extension, and a set of free, no-signup checkers that run entirely in the visitor’s browser. Detection combines a transformer text model, a classical classifier and a deterministic rule engine with India-specific heuristics, covering 14 fraud categories with Hindi and Gujarati coverage. It is not antivirus and not a firewall.

Market context

The scale of the problem

The same figures we show buyers as risk are, for an investor or grant reviewer, the size of the problem ScamShield AI is built against. Each is from a public source; we do not publish our own market-size estimates.

₹58,772 crore in fake GST invoices

₹58,772 crore of suspected bogus billing across more than 24,000 fake GST invoice cases were uncovered by Indian authorities in FY2025-26, per data shared in Rajya Sabha. Genuine businesses that transacted with those vendors face demand notices and ITC reversals they did nothing to cause.

13.42 lakh UPI fraud cases in a year

13.42 lakh UPI fraud cases and ₹1,087 crore in losses were recorded in India in FY24, per data shared in Parliament by the Finance Ministry. ₹485 crore more was lost across 6.32 lakh incidents in the first six months of FY25 alone.

Under 6% of stolen money recovered

Recovery rates remain below 6% of the stolen amount, per government data for April to September 2025. Once a UPI or NEFT payment has left an SME’s account, it is almost never coming back; prevention is the only economic answer.

9% of cybercrime losses from “digital arrest”

Digital arrest scams accounted for an estimated 9% of India’s cybercrime losses in 2025. Fake digital identities compiled from genuine and fabricated information rose 450% between 2022 and 2025, per NASSCOM and DSCI research, which is the infrastructure behind convincing forged notices, IDs and screenshots.

Who is behind it

Darshil Thummar · Co-Founder & CTO

MSc in Information Security and Digital Forensics. Worked for years in cybersecurity and digital forensics in the UK, and volunteered with The Cyber Helpline supporting people after they had been scammed. Moved back to Ahmedabad to build detection for the fraud Indian SMEs actually receive. Darshil is also the company’s Data Protection Officer and Grievance Officer under the DPDP Act 2023. Why he built this, in his own words →

Jay Hirpara · Co-Founder & CEO

Leads go-to-market, business development, and CA-firm partnerships.

Recognition and registration

DPIIT-recognized startup

ScamShield AI Private Limited holds a Certificate of Recognition from the Department for Promotion of Industry and Internal Trade (DPIIT), Ministry of Commerce & Industry, Government of India, under the Startup India initiative. Certificate No. DIPP277364, issued 13 August 2026. Recognized sector and industry: IT Services / Application Development. Verify this certificate on the Startup India portal.

Registered in India, hosted in India

ScamShield AI Private Limited, registered office at 32, Bhaktinandan Shopping, Bapasitaram Chowk, Krishnanagar, Ahmedabad 382345, Gujarat, India. All processing and storage runs on Microsoft Azure Central India; customer data does not leave the country. GST-compliant invoicing as standard.

What we do not claim

We are not a government service and are not affiliated with CBIC, the GST Network or any bank. Traction figures are published only once verified; none are listed on this page yet.

Compliance and data posture

DPDP Act 2023, built in

Email bodies are never written to our database, only the fraud verdict and detection metadata. Phone numbers are stored as a keyed hash, never in plain text. Audio is deleted within minutes of analysis. A deletion request is completed within 30 days.

Data residency

Everything runs on Azure Central India. No threat data, email content or business information is transmitted to an overseas server, in line with RBI data-residency guidance and the DPDP Act 2023.

Named accountability

Grievance Officer: privacy@scamshieldai.in, 72-hour response. Security disclosures: security@scamshieldai.in, never a public issue tracker. Breach notification to affected customers and, where required, the Data Protection Board of India.

Written commitments

Stated limits

No fraud detector catches everything and sophisticated attacks may bypass detection; the free GSTIN check is structural, not a live registry lookup; voice analysis is rule-based acoustic analysis, not a trained model. We would rather a reviewer read these here than discover them later.

For grant and scheme reviewers

Public benefit

Most of what fraud costs an SME is never recovered, so the value is in the loss that never happens. Several parts of ScamShield AI are free and need no account, by design.

Free checkers, no signup, nothing sent to a server. The GSTIN checker, GST notice checker, GSTIN-PAN consistency check and vendor invoice check run entirely in the visitor’s browser and are open to anyone.
Vernacular access. Detection covers Hindi and Gujarati, and the GST notice checker is published in Hindi at /hi/gst-notice-checker, for the trading firms and manufacturers who do not correspond in English.
Reaching non-technical staff. The WhatsApp channel needs no app and nothing to learn: if a member of staff can forward a message, they can check it. Gamified fraud-awareness training keeps a whole team alert, not just the accounts desk.
Help after the fact. Free, forwardable guidance on what to do in the first 10 minutes after a fraud, including reporting on cybercrime.gov.in and the 1930 helpline, and checklists a CA can send a client the moment something looks off.
Sector and reach. Recognized sector: IT Services / Application Development. Customers are Indian SMEs and the CA firms that manage dozens of them, so one deployment at a CA firm protects many businesses at once.

Talk to the founders.

Investor, partnership, press or scheme enquiries: write to investors@scamshieldai.in; a founder replies within one business day. ScamShield AI Private Limited, Ahmedabad, Gujarat, India · LinkedIn.

Email the founders Read the founder story