ScamCheck lets you see how trustworthy a website is
"Our mission is to protect internet users in the Netherlands"
"Our mission is to protect internet users in the Netherlands"
Every year in the Netherlands, a total of roughly €2.75 billion is lost to fraud, say researchers at the University of Twente. The victim survey underpinning that figure also found that most scams now happen online. Given that the Netherlands has one of the highest rates of internet use in the world, digital resilience and online security are particularly and increasingly important. ECP | Platform for the Information Society and Thuiswinkel.org have therefore forged an alliance with various partners, including SIDN, to launch ScamCheck. Available on veiliginternetten.nl, ScamCheck is an online tool that lets internet users see whether a website is legitimate. Jorij Abraham, CEO of the Global Anti-Scam Alliance and ScamAdviser, explains: "Our mission is to protect internet users in the Netherlands. Working closely with partners enables us to share knowledge and make the internet safer." Jorij Abraham and Esther Mieremet, ECP's Project Advisor and veiliginternetten.nl Project Leader, talk about this summer's ScamCheck pilot, the initiative's rollout and the search for potential partners.
"At ECP, we work to promote a resilient, opportunity-rich digital society. Online safety is very much part of that," explains Esther. "One way we pursue that goal is by giving practical information and advice on our website, about online privacy and how to use the internet safely. Our new ScamCheck tool is aimed at Dutch internet users, trade associations, tradespeople and businesses. You enter a URL into the search box, and ScamCheck checks whether the website is a phishing site, a scam site, or legitimate. Completely free of charge. The checked website is given a Trust Score on the basis of data provided by various Dutch organisations. For example, you can see whether the website is registered with the Chamber of Commerce, whether its SSL certificate is valid and whether it's been reported as a phishing site. The organisations we get the data from include ScamAdviser, Thuiswinkel.org and the Chamber of Commerce. As well as being ScamCheck's developer, ScamAdviser is a key input provider. They identify logical relationships between data sources to arrive at a Trust Score for each scanned site. That's done using a special algorithm that's under continuous refinement. If a website has a low Trust Score, it's up to the internet user whether they go ahead and visit. We give advice, but leave the decision-making to the user."
"All websites start with a high Trust Score," adds Jorij. "Any negative pointers identified by ScamCheck then bring the score down. The Trust Score also reflects positive pointers, such as certification of a website by the Chamber of Commerce or Thuiswinkel.org. Tradespeople, businesses and trade associations can use the Trust Score to show that their websites, payment methods or software products are safe. If a website has a low score, it's up to the owner to make the improvements needed to bring the score up." Esther continues: "ScamCheck shows where the information behind a score comes from. So a site owner can approach the organisations involved to find out why their score is low. After all, websites are sometimes used for phishing without the owners realising. Once the problem is drawn to their attention, the owner can often sort it out within hours."
"The partnerships we've built with a number of organisations have proved extremely valuable. Everyone has pulled together and committed wholeheartedly and selflessly to tackling cybercrime in the Netherlands. One of the organisations allied to the initiative is SIDN, who let us launch ScamCheck at SIDN Inspire 2022," says Esther. "Our work dovetails perfectly with SIDN's mission to promote problem-free, opportunity-rich digital living for everyone." Jorij adds, "SIDN has a lot of valuable know-how about tackling malicious domain names. They work with partners in the Netherlands and other countries to minimise cybercrime. We too firmly believe that joining forces nationally and internationally is the best way to achieve results."
"We're piloting ScamCheck over the summer," says Esther. "During the pilot phase, we'll look at things such as how user-friendly the tool is, and who is coming onboard. On the basis of the results, we'll make any necessary adjustments to the way we communicate with the target audience. Then, in October, which is Cybersecurity Month, we'll start a major campaign to promote ScamCheck. Details of the campaign will be worked out in the period ahead. We've already developed a toolkit containing a press release, illustrations and model texts for use on social media, so that our partners and others can share information about ScamCheck with their networks." Jorij clarifies that, although ScamCheck is already a fully functional tool, it is being refined all the time. "We need to be sure that the tool remains legal and technically up to date. So we're currently developing an environment for GDPR-compliant central storage of all the information we have about scams. That's challenging, because cybercriminals operate internationally. Meanwhile, we're already looking beyond the Netherlands and working to roll out ScamCheck in the UK and Portugal. Just as we've done at home, we're working with local partners in those countries to develop versions of ScamCheck adapted to the national internet user population."
"Cybersecurity remains a burning issue, which is attracting more and more political interest. In the future, we can expect the digital space to keep on growing, and cybercriminals to get smarter. So it's vital to press ahead with initiatives such as ScamCheck. Then hopefully we can halt the rise in cybercrime and help make the internet safer for everyone," concludes Jorij.
Sharing data and using ScamCheck enables us to identify more scam websites and increase our impact. If you're interested in becoming a ScamCheck partner like us, mail info@ecp.nl or report@scamadviser.com.