PhishGuard shield-and-lock logo PhishGuard v0.1.0 Get the app
Research build · Android · sideloaded APK

Every link gets stopped and searched before it opens.

PhishGuard watches SMS, Gmail, and Messenger for the moment you tap a link, checks it against a phishing classifier, and blocks the ones built to steal your credentials — before your browser ever loads.

Download APK See how detection works

Signed release build · v0.1.0-phase3-skeleton · not on the Play Store, installed manually.

Messages · SMS
Your package is on hold. Confirm your address to release it: bit.ly/4kx2--del1very-confirm
BLOCKED
This link cannot be opened
For your safety, PhishGuard blocked this page. It looks like a phishing attempt.
OK
Detection pipeline

Four checkpoints, one tap.

PhishGuard runs as an AccessibilityService, not a notification listener — the only way to read tappable link text across SMS, Gmail, and Messenger before it opens. Every tapped link passes through the same four stages.

STAGE 01

Intercept

Walks the on-screen accessibility node tree and collects text only from clickable nodes — tappable links, not every URL-shaped string on the page.

extractClickableText
STAGE 02

Look up

Checks the local cache for this exact URL first. A previously classified link skips straight to a verdict — no repeat work.

CachedUrlDao
STAGE 03

Trace

Shortened links are followed redirect-by-redirect until the real destination is captured, so shorteners can't hide where a link actually goes.

UrlExpander · OkHttp
STAGE 04

Classify

Sixteen features — entropy, TLD, subdomain count, and more — feed a 100-tree Random Forest that votes phishing or legitimate.

PhishingModel · 100 trees
Interface preview

What you'll see on-device.

Composited from the app's real layouts and copy — not photographed screenshots. A few history and filter screens are still wiring up live data, noted honestly rather than staged.

PhishGuard
Protection Active
18
Today's scans
Recent detections
SMSbit.ly/4kx2--del1very
Phishing
Emailaccounts.google.com
Legitimate
Messengersecure-appleid-verify.top
Phishing
Checking link…
PhishGuard is scanning this link before it opens. secure-appleid-verify.top/login
CLEARED
This link appears safe
Do you want to proceed?
Proceed Don't proceed

Dashboard & History currently render mock data on-device — live queries are the next milestone.

Declared permissions

What PhishGuard can see, and why.

This access is unusually broad for a sideloaded app, so it's spelled out plainly rather than buried in a settings screen.

ACCESSIBILITY_SERVICE
Reads tappable link text in the Messages, Gmail, and Messenger apps only — the only permission that lets an app read on-screen text across other apps to catch a link before you tap into a browser.
SYSTEM_ALERT_WINDOW
Draws the warning overlay ("Checking…" / "Blocked" / "Proceed?") on top of whatever app you tapped the link in.
INTERNET
Resolves shortened links by following their redirects — the same network request your browser would make, just made first. Detection history is stored locally in an on-device database; this build has no analytics or remote logging wired in.
Install guide

Getting set up.

PhishGuard isn't on the Play Store, so Android will flag it as an unknown source during install — expected for a sideloaded research build.

  1. 1

    Download the APK

    Tap the Download button above — the signed build comes straight from this site.

  2. 2

    Allow this source

    Android will prompt to allow installs from your browser or file manager — approve it for this one file.

  3. 3

    Open PhishGuard

    The app sends you straight to Accessibility settings and tap Enable in Settings.

  4. 4

    Turn on the service

    Find PhishGuard in the Accessibility list and switch it on. The app detects this automatically and brings you back.

  5. 5

    Allow the overlay

    Tap Allow Display Over Other Apps so warnings can appear when a link is tapped. You're protected.

Before you install

PhishGuard is an early-stage research/study build (v0.1.0), not a finished security product. It hasn't been audited, isn't on the Play Store, and comes with no warranty. Use it to explore on-device phishing detection — not as your only line of defense.

PhishGuard shield-and-lock logo
Signed & ready

Protect your messages, Gmail, and Messenger.

Download APK