Screens one message (DM, email or chat text) for common crypto and phishing scam signals in English: urgency, fake support or giveaway, wallet-connect or seed-phrase requests, guaranteed returns, and suspicious links. Returns HIGH/MEDIUM/LOW/NONE with each matched phrase. A fixed rule list: it misses new wording and other languages, and it never sees the sender's account.