Privacy Policy

1. Who We Are

ScammerWatch is operated by PLAN TO SCAN LTD, company number 11753406, registered at 9.6 Mount Pleasant Road, Southampton, England, SO14 0QB, United Kingdom.

ScammerWatch is an independent online fraud reporting and safety publication. We review reports involving phishing pages, fake trading platforms, scam tokens, wallet drainers, impersonation attempts, and other online fraud. We may prepare structured abuse reports for submission to relevant service providers, security teams, and competent authorities.

For data protection purposes, PLAN TO SCAN LTD is the data controller for personal information processed through ScammerWatch.

For privacy enquiries, contact: [email protected]

2. What Data We Collect

We collect personal data when it is voluntarily submitted through our report submission form, contact form, or direct email communication. We may also collect limited technical and analytics information automatically when users visit the website.

1. Name, where provided
2. Email address, where provided
3. Suspicious URLs submitted for review
4. Screenshots and uploaded evidence files
5. Wallet addresses and transaction IDs
6. Descriptions of incidents submitted by reporters
7. IP address, browser type, device information, pages visited, timestamps, and similar technical information collected by analytics and security technologies

Do not submit passwords, seed phrases, private keys, full payment card numbers, or identity documents unless we specifically request information through an appropriate secure process. ScammerWatch does not request cryptocurrency recovery credentials or wallet access.

3. Legal Basis for Processing

Where applicable under the UK GDPR or GDPR, personal data may be processed on the following legal bases:

Legitimate interests (Article 6(1)(f)): We may process report submissions in order to investigate and document suspected fraud, prepare abuse reports, protect users, maintain the security of ScammerWatch, and share relevant evidence with appropriate third parties. Our legitimate interests include fraud prevention, abuse reporting, website security, and maintaining reliable public safety information.

Consent (Article 6(1)(a)): Where consent is required, including for certain analytics or advertising measurement technologies, processing takes place only after appropriate consent has been obtained. Consent may be withdrawn at any time.

Legal obligation (Article 6(1)(c)): We may process, retain, or disclose information where required to comply with applicable law, court orders, regulatory requirements, or other lawful obligations.

4. How We Use Submitted Data

We may use information submitted through report forms, contact forms, and email communications for the following purposes:

1. Reviewing and classifying reports according to our published methodology
2. Investigating suspected fraud, phishing, impersonation, malware, wallet-draining activity, and other online abuse
3. Preparing structured abuse reports
4. Contacting reporters when additional information or clarification is needed
5. Updating report status when new evidence becomes available
6. Preserving evidence relevant to ongoing fraud or abuse investigations
7. Improving ScammerWatch safety content and fraud documentation
8. Protecting the security and integrity of the website

5. Who We Share Data With

Relevant evidence or report information may be shared when necessary to investigate, report, prevent, or respond to fraud, phishing, impersonation, malware, abuse, or other suspected unlawful activity.

Depending on the circumstances, recipients may include:

• Domain registrars when reporting domains associated with phishing, impersonation, fraud, malware, or other abuse
• Hosting providers when reporting abusive websites or content hosted on their infrastructure
• Infrastructure providers, including content delivery, DNS, network, cloud, or other technical service providers, where their infrastructure is relevant to an abuse report
• Platform security teams, including exchanges, app stores, social networks, messaging services, and other online platforms
• Payment processors where relevant to suspected fraudulent payment collection
• Competent authorities, regulators, supervisory bodies, or other public authorities where appropriate or legally required
• Law enforcement where appropriate, legally required, or where the evidence may relate to suspected criminal activity

We aim to share only information that is relevant and proportionate to the purpose of the report or investigation.

Information shared in an abuse report may include suspicious URLs, domain names, wallet addresses, transaction identifiers, screenshots, timestamps, incident descriptions, technical evidence, and other information relevant to the reported abuse.

Reporter contact details are not normally included in provider-facing abuse reports unless disclosure is necessary, legally required, or the reporter has agreed to the disclosure.

We do not sell personal data.

6. Analytics, Advertising Measurement and Security Technologies

We use website analytics and security technologies to understand traffic patterns, measure website performance, prevent spam and abuse, and protect ScammerWatch. These technologies may process information such as IP addresses, browser type, device type, pages visited, referral information, timestamps, and interaction data.

We may use analytics and advertising measurement technologies, including Google Analytics and Google Ads measurement technologies, where permitted by applicable law. Where consent is required, these technologies are activated only after the appropriate consent has been obtained.

Depending on our website configuration, Google-related technologies may be implemented directly or through tools such as Google Tag Manager. These technologies may support analytics, conversion measurement, advertising measurement, remarketing, or audience measurement where legally permitted and where any required consent has been obtained.

We also use Cloudflare for website security, performance, traffic management, and protection against malicious activity. Cloudflare may process technical request data in accordance with its own privacy practices.

7. Cookies and Consent

ScammerWatch may use cookies or similar technologies for essential website operation, security, analytics, and advertising measurement.

Where applicable law requires consent for non-essential cookies or similar technologies, those technologies are not activated until the required consent has been obtained.

Users may be able to manage or withdraw their consent through the consent controls provided on the website. Withdrawal of consent does not affect processing that occurred lawfully before consent was withdrawn.

8. Data Retention

We retain submitted report data only for as long as reasonably necessary to:

1. Review and process the report
2. Maintain evidence records for active or ongoing abuse cases
3. Support follow-up reports to providers or authorities
4. Maintain accurate fraud documentation
5. Comply with applicable legal obligations

When information is no longer required for the purposes for which it was collected, it may be deleted or anonymised, subject to legal, regulatory, evidential, or investigative retention requirements.

You may request deletion of personal information relating to you, subject to any lawful basis or obligation requiring continued retention.

9. Your Data Protection Rights

Depending on your location and applicable law, you may have rights regarding your personal data, including:

• Right of access: You may request information about personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete information.
• Right to erasure: You may request deletion of personal data in circumstances where applicable law provides this right.
• Right to restrict processing: You may request that processing be restricted in certain circumstances.
• Right to data portability: Where applicable, you may request personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests in circumstances provided by applicable law.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise a data protection right, contact [email protected].

You may also have the right to lodge a complaint with the data protection authority responsible for your jurisdiction if you believe your personal information has been processed unlawfully.

10. International Data Transfers

PLAN TO SCAN LTD may transfer or disclose relevant information to registrars, hosting providers, infrastructure providers, platform security teams, analytics providers, competent authorities, or other recipients located outside the United Kingdom or European Economic Area.

Where applicable data protection law requires safeguards for an international transfer, we use an appropriate transfer mechanism, which may include adequacy regulations or decisions, standard contractual clauses, the UK International Data Transfer Agreement, the UK Addendum, or another lawful transfer mechanism as applicable.

11. Copyright and Media

ScammerWatch uses original, licensed, public-domain, or properly attributed media. We do not treat images found on the internet as automatically free to use.

If you believe copyrighted material belonging to you appears on ScammerWatch without appropriate permission, contact [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal obligations, or regulatory requirements. The “Last updated” date at the top of this page identifies the latest revision.

13. Contact

PLAN TO SCAN LTD
Company number: 11753406
9.6 Mount Pleasant Road
Southampton, England
SO14 0QB
United Kingdom

Privacy enquiries: [email protected]
Abuse reports: [email protected]
Legal / copyright: [email protected]