Unsubscribe from online scams.

Cody runs quietly in your browser and blocks the tricks scammers use to hijack screens, trap cursors, and fake virus warnings. It catches 13 attack patterns in real time. Available for Chrome.

Chrome Web Store coming soon — Beta early access →

Cody the dog, sitting and smiling

Your friendly scam blocker.

Cody spots scam patterns the moment they fire and shuts them down before anything appears on screen.

Blocks screen hijacking
Catches phishing links
Flags remote access tools
Zero data collection by default

3.5M

Scam attempts per year in the US

$450

Average loss per tech support scam

<1s

Time for Cody to block an attack

100%

Local detection by default

How it works

Invisible defense that just works

No configuration. No accounts. No decisions to make. Cody handles everything.

Runs silently

Detects the specific browser API patterns that scammers use to hijack screens. Zero performance impact.

Blocks instantly

When a scam pattern is detected, Cody kills it before anything appears on screen. No popups, no scary warnings.

Notifies you

Get a notification when Cody blocks a scam. Share your team dashboard so everyone stays in the loop.

Defense

What Cody stops

Online scams that target vulnerable people through their browser. Cody blocks these attack patterns in real time.

Screen takeover attacks Active

Fullscreen API abuse that hides the browser and fakes an OS crash

Fake virus warnings Active

Alert/confirm dialog spam showing “Your PC is infected” messages in a loop

Cursor & keyboard hijacking Active

Pointer lock and keyboard lock that trap the user with no way to close the page

Back button traps Active

History.pushState spam that fills the back button so the user can’t navigate away

Exit prevention traps Active

Beforeunload handlers that show “Are you sure?” dialogs repeatedly to prevent leaving

Phishing link detection Active

Scores every link on the page for phishing signals: lookalike domains, suspicious TLDs, redirect unwrapping, brand impersonation

Remote access tool alerts Active

Flags visits to TeamViewer, AnyDesk, and other remote desktop tools scammers ask victims to install

Suspicious download scanning Active

Detects links to executable files (.exe, .msi, .bat, .scr) that scam pages try to get you to download

Scam phone number detection Active

Scans page text for phone numbers paired with scam language like "call Microsoft support immediately"

Clipboard hijacking Active

Warns when a page tries to silently overwrite your clipboard with a crypto address or malicious command

Screen-share interception Active

Warns when a page requests screen sharing via getDisplayMedia, a common step in remote-access scams

Popup storms Active

Rapid window.open calls that flood the screen with new windows, overwhelming the user and hiding the real browser

Site impersonation Active

Detects pages mimicking trusted brands like Microsoft, Apple, or Google to trick users into calling fake support numbers

The threat

How scammers take over a browser

They chain three browser APIs together to make it look like the computer is frozen, then show a fake virus warning with a phone number.

1

Fullscreen takeover

Hides the address bar and tabs. The scam page fills the entire screen, mimicking the operating system.

2

Cursor hijack

Locks and hides the mouse pointer. The user can't click away, close tabs, or reach the X button.

3

Keyboard trap

Blocks Escape, Alt+Tab, Ctrl+W, and other keys. There's no obvious way out. Panic sets in.

Live demo

See Cody in action

These are real browser API calls. With Cody installed, they get blocked. Without it, the simulated scam overlay takes over.

Browser API Console

Interactive
Ready. Click a button to trigger a real browser API call.
Trust

Built different from antivirus

No scare tactics. No data harvesting. No upsells. Just honest scam blocking.

No data by default

All detection runs locally. Data only leaves your browser if you opt into a team.

Open source

Every line of code is public on GitHub.

Free core, forever

All scam blocking is free. The optional Team plan ($9/mo) adds a shared dashboard.

30-second install

Install on Chrome. Nothing to configure.

FAQ

Common questions

What exactly does Cody block?

Cody catches 13 scam patterns: screen takeovers (fullscreen, pointer lock, keyboard lock), dialog spam, exit traps, history spam, popup storms, phishing links, scam phone numbers, remote-access tool visits, suspicious downloads, screen-share requests, and clipboard hijacking.

Does Cody collect any data?

Not by default. All detection runs locally in your browser with zero analytics or tracking. If you sign in and join a team, block events and your profile are synced to a shared dashboard. Read our privacy policy.

Will it slow down the computer?

No. Cody only activates when it detects a scam pattern. It uses virtually no CPU or memory during normal browsing.

What if a legitimate site gets blocked?

Extremely rare. Cody targets scam-specific behavior patterns, not websites. If it happens, you can allowlist any site in one click.

Is it really free?

Yes. All scam blocking is free forever. Optional paid plans (Pro $5/mo, Team $9/mo, Business $25/mo) add teams, more devices, alerts, API access, and SSO. See pricing.

Keep someone you love safe.

Install Cody on your parent's computer next time you visit. Available for Chrome.

Get Cody — Free

Beta early access →

Windows Defender — Security Warning

Your PC Has Been Compromised!

Windows Defender has detected Trojan_Spyware.Alert — Error Code: #0x80073b01

Your passwords, browser history, and credit card information are at risk.

Do NOT shut down or restart your computer.

1-888-555-0199

Call Microsoft Certified Technicians immediately

YOUR COMPUTER HAS BEEN LOCKED
This is a demo — no real malware. Phone number is fake.
Exit: Ctrl+Alt+Del (Win) or Cmd+Option+Esc (Mac)