what happened to you?
five questions. pick the closest one. each opens the right local workbench — no upload, no account, nothing leaves your device. if none of these fit, browse all case types here.
do not delete anything yet. evidence disappears fast. do not factory-reset the phone, clear browser history, or wipe the laptop before you run the relevant tools below.
I think someone is spying on my phone or tracking my location.
This includes tracking apps, shared accounts your partner can read, unknown apps, an ex who knows where you are, or AirTags.
open the stalkerware sweep →
My files are encrypted or I got a ransom note.
This includes a message demanding payment to unlock files, a pop-up saying "your files have been encrypted", or file extensions changed to something unrecognizable.
open the ransomware response workbench →
I sent money to the wrong account — a scammer, a fake vendor, or a fake buyer.
This includes wire transfers to a fraudulent account, cryptocurrency sent to a scam wallet, gift cards sent to a fake support agent, or earnest money wired to the wrong title company.
open the wire fraud / report this fraud workbench →
Someone is threatening to publish my private photos or videos.
This happens to adults and minors. It includes demands for money, more images, or silence, from anyone — a stranger, a platform, a former partner.
open the sextortion workbench →
Someone got into my email, bank, or social account and locked me out.
This includes password reset emails you didn't request, unfamiliar logins, MFA codes sent without you asking, or accounts you can no longer access.
open the account takeover workbench →
not sure which one?
fatcousin is local-first triage — every tool runs in your browser. nothing you open here is uploaded. outputs require verification before any legal or safety use. see scope and honest limits · disclaimer · acceptable-use policy.