The victim is a decoy.
Haunch puts believable AI decoys in front of scammers and keeps them talking until they type out where the money should go. Each bank account, wallet and scam site then goes to whoever can block it, with a record nobody can quietly edit.
A believable person picks up.
Our decoys are made-up people with steady stories and small habits. Scammers hear a patient, slightly confused stranger who wants to do the right thing.
- Persona
- Margaret, 74
- Story
- Retired librarian, Ohio
- Habit
- Talks about her cat, Biscuit
- Rule
- Never sends money, never shares real data
Willing, clumsy and endlessly patient.
The decoy asks which number goes in which box, says the transfer failed, and asks for another account. Every account, wallet, phone number and link is checked the moment it appears.
Scripted sample with made-up accounts. The detection is real Haunch output.
Then the scammer types out where the money goes.
A working account is the one thing a scammer can't fake, and they will hand it to anyone who seems ready to pay. That account is what a bank can block.
Every detail is sealed into a chain nobody can quietly edit.
Each message and each collected detail is one link. Every link carries a fingerprint of its contents and of the link before it, so a bank or investigator can check that nothing changed.
Straight to the people who can freeze the money.
- Pilots openBanks and credit unionsMule accounts while the scam is still running, before your customers pay into them.
- Pilots openExchanges and stablecoin issuersWallet addresses scammers are using right now, ready to flag or freeze.
- In developmentPhone carriersSend detected scam calls and texts to decoys instead of just blocking them.
- ComingEveryone elseForward a scam message and a decoy takes the conversation off your hands.
Fighting scammers doesn't excuse acting like one.
- We only keep what scammers send us.No hacking back, no tracing, and no tricking anyone into installing anything.
- Our decoys are made up.No real person's name, photo or details. They never send money or real data.
- A lead is not a verdict.Mule accounts often belong to victims and numbers get spoofed, so the bank checks before it acts. We never publish names.
- Many scammers are prisoners.The UN human rights office reported in February 2026 that at least 300,000 people from 66 countries are forced to work in scam compounds. We go after the money, not the person typing. Source
What people ask before they try it.
- What is Haunch?Haunch is an AI scambaiting platform. Its decoy personas answer scammers by text, keep them talking, and collect the bank accounts, crypto wallets and scam sites the scammers reveal, then send them to the organizations that can block them.
- What is scambaiting?Scambaiting is engaging a scammer on purpose, while pretending to be a victim, to waste their time or gather intelligence. Haunch automates it with AI decoys and measures success by payment destinations captured, not hours wasted.
- How does Haunch get a scammer's bank account?A scammer has to tell a willing victim where to send the money. The decoy plays a willing, slightly confused victim: it asks which number goes in which box, says the transfer failed and asks for another account. Every account, wallet and link is checked the moment it appears.
- Who is Haunch for?Banks and credit unions, which get mule accounts before their customers pay into them; exchanges and stablecoin issuers, which get wallet addresses they can freeze; phone carriers, which can send detected scam traffic to decoys instead of just blocking it; and anyone who wants to forward a scam text and let a decoy take over.
- Is scambaiting legal?Replying to someone who contacted you is legal in most places, and Haunch is built to stay well inside the rules: decoys only talk to scammers who made contact first or whose messages were forwarded by the person who received them, they never send money or real personal data, and Haunch never hacks back or traces anyone. Voice calls need recording consent in many places, which is why Haunch starts with text. This is not legal advice; laws differ by country.
- Are the decoys real people?No. Every decoy is fictional, with a made-up name, story and habits. Haunch never uses a real person's name, photo or details.
- What happens to a collected account or wallet?It is sealed into a tamper-evident record and sent to the institution that can act on it: the receiving bank's fraud team, the exchange or stablecoin issuer, the carrier or the registrar. A lead is not an accusation. Mule accounts often belong to victims, so the institution checks before it acts, and Haunch never publishes names.
- Is Haunch open source?The Haunch engine will be released under the Apache 2.0 license, so anyone can check how a lead is produced. The production personas stay private so scammers cannot study them.
- How can my bank or exchange try it?Request a pilot with the form on this page. The Haunch team replies by email.
Put our decoys on your scam traffic.
The Haunch engine will be open source under Apache 2.0, so anyone can check how a lead is produced. Source code publishing soon.