Check the message. Check the link.

ARKA screens SMS, email, and WhatsApp messages, guards links with OpenPhish, PhishStats, URLhaus, VirusTotal, Safe Browsing, and a built-in Sentinel engine, validates UPI payees, and scans APKs with static analysis and VirusTotal. The emergency path to 1930 and the national cybercrime portal is always one tap away.

Open admin console → Check API status

💬

Message Shield

Contextual SMS, email, and WhatsApp analysis for OTP theft, digital arrest, fake jobs, investment scams, remote-access apps, and UPI fraud.

🛡️

Link Guard

OpenPhish, PhishStats, URLhaus, VirusTotal, Google Safe Browsing, and the built-in Sentinel engine before browser handoff.

₹

UPI Guard

QR decoding, VPA validation, PSP/bank resolution, amount checks, unsigned-QR flags, and payee risk scoring.

▣

APK Scanner

Local permission and behavior inspection with optional MobSF decompilation and VirusTotal results.

🚨

Emergency response

1930 helpline, cybercrime.gov.in portal, evidence-preservation steps, and one-tap actions in the app.

⌁

Admin integrations

Configure and test OpenPhish, PhishStats, URLhaus, VirusTotal, Safe Browsing, OCR.space, OpenAI, and optional MobSF from one panel.

API surface

Root aliases and canonical routes return the same JSON. Use /api/v1 for new integrations.

Method	Legacy route	Canonical route	Purpose
POST	`/analyze_message`	`/api/v1/fraud/message`	Message Shield
POST	`/guard_link`	`/api/v1/link/guard`	Click-time link guard
POST	`/check`	`/api/v1/check`	Legacy URL check
POST	`/upi_parse`	`/api/v1/upi/parse`	Parse UPI QR/link
POST	`/upi_validate`	`/api/v1/upi/validate`	Validate payee
POST	`/apk_scan`	`/api/v1/apk/scan`	Upload and scan APK
GET	`/apk_status/{id}`	`/api/v1/apk/scans/{id}`	APK scan status
GET	`/emergency`	`/api/v1/emergency`	1930 + portal
POST	`/verify_news`	`/api/v1/verify_news`	Legacy claim analysis
POST	`/verify_ad`	`/api/v1/verify_ad`	Legacy ad analysis
POST	`/verify_company`	`/api/v1/verify_company`	Legacy company signals
POST	`/process_screenshot`	`/api/v1/process_screenshot`	OCR-to-text + check
POST	`/detect_ai_content`	`/api/v1/detect_ai_content`	Text-only AI detection

Removed: image/video AI-content analysis, voice features, and user history. OCR remains only as screenshot-to-text input for link and message checks. The text-only AI endpoint is still available for legacy integrations.

Admin API: POST /api/v1/auth/login returns a Sanctum bearer token for GET /api/v1/auth/me and POST /api/v1/auth/logout.