OneGuard: Scam & Spy Check

OneGuard looks for scam signs in your texts, links and QR codes, checks your phone for signs that someone is monitoring it, and points out apps that deserve a second look. Every check runs on your phone. There is no account to create, and OneGuard has no internet permission, so what it finds stays with you.

Scam guard: texts
With notification access turned on, OneGuard checks each new text from your messaging app as its notification arrives. When a text shows scam signs, such as a shortened or insecure link, pressure to pay, a look-alike web address, or a company name that doesn't match the link, OneGuard flags it and lists the reasons. It can't block or delete texts, so the decision stays yours.

Scam guard: links
Paste a link from a text, email or QR code to see the warning signs in its address before you open it.

Scam guard: QR codes
Scan a code with the camera or choose a photo of one. OneGuard shows what the code really holds, such as a web link, Wi-Fi details, a payment request or a contact card, and checks any link inside it. Nothing is opened automatically.

Scam guard: calls
On Android 10 and newer, OneGuard can be your caller ID and spam app. For each call from a number that isn't in your contacts, it notes whether the number was hidden, whether the country code differs from your SIM's and, where your network supports it, whether the caller ID was verified. Switch on a rule to decline hidden numbers or calls that fail caller ID checks. Declined calls stay in your call history.

Spy check
Spy check looks for signs that someone may be monitoring your phone: apps that can read your screen through Accessibility, device admin apps, apps that read your notifications, apps without an icon of their own, apps installed from outside a known app store, and basic signs of root. It also compares your apps with a public list of known monitoring apps (stalkerware-indicators by Echap, CC BY 4.0). Findings come with an explanation and safety advice, because removing a monitoring app can alert the person who installed it.

Defence check
Defence check shows how hard your phone is to break into. It reads six settings where Android allows it: Advanced Protection (Android 16 and newer), the age of the newest security update, screen lock, USB debugging, storage encryption, and the bootloader lock as the phone's secure hardware reports it. Each item that needs attention comes with a next step. It also suggests steps OneGuard can't check, such as turning off 2G and checking call forwarding. It doesn't look for spyware: no app from an app store can detect surveillance by a mobile operator or government-grade spyware.

App check
Scan goes through the apps you installed and points out the ones worth a look, based on where each app came from and which sensitive permissions it holds, such as reading your texts or call history, or drawing over other apps. From a finding you can open App info or remove the app. These are local checks, not a malware verdict.

Daily check-up
Switch it on and OneGuard repeats the app check about once a day, even when the app is closed. You get a notification only when something new needs a look.

Privacy
See which apps you installed can use your camera, microphone, location and contacts, including any that can use your location all the time. Tap an app to change its permissions in Android's settings.

Your data, in view
Settings shows what OneGuard can access and whether each access is on, lists everything OneGuard keeps on your phone, and lets you erase all of it. Nothing is synced, and with no internet permission, OneGuard can't send anything off your phone.

What OneGuard does not do yet
OneGuard sticks to what it can check on your phone. This version doesn't detect malware, include a VPN, or watch for your details in data breaches. It never calls a link safe, and it can't tell whether a caller is a scammer. It shows you the signs and leaves the decision to you.