An AI-Powered Digital Identity & Scam Prevention Platform
Know before you click, answer, or pay.
SecureID AI combines phishing detection, QR code analysis, voice scam detection, deepfake detection, identity risk monitoring, and an AI security assistant into a single, unified platform β instead of forcing users to juggle five different single-purpose security tools.
- Problem
- Solution
- Core Features
- Demo
- Tech Stack
- Architecture
- Project Structure
- Getting Started
- Environment Variables
- Deployment
- Roadmap
- Contributing
- License
- Team
People are targeted by scams from every direction, and existing tools only ever solve one piece of the puzzle:
| Threat | Typical current defense |
|---|---|
| Phishing websites | A browser warning, if you're lucky |
| QR code scams | Nothing β most people scan blindly |
| Fake customer support calls | Nothing, until it's too late |
| Deepfake videos and voices | Almost no consumer-facing tools |
| Identity theft | Reactive, after-the-fact breach alerts |
| Fake banking / UPI apps | App store moderation, which lags |
| Fraudulent emails and SMS | Basic spam filters |
Each of these usually requires a separate app or service. SecureID AI brings all of them into one platform, with one consistent, explainable risk score across every check.
SecureID AI is a single web platform where a user can:
- Paste a suspicious link, SMS, or email and get an instant, explained risk score
- Scan a QR code before opening whatever it points to
- Upload a suspicious call recording and check for scam patterns or voice cloning
- Upload a photo or video and check whether it's AI-generated or manipulated
- See one overall "digital identity safety score" across passwords, breach exposure, and device hygiene
- Ask a plain-language AI assistant, "Is this safe?" β and get reasoning, not just a verdict
- Report scams to a community map that helps warn others nearby
Paste a URL β get a 0β100 risk score, a plain-language verdict, and the specific indicators that drove the score (domain age, HTTPS status, brand mimicry, etc.).
Scan or upload a QR code. The decoded destination is always shown before any action is taken, and is then run through the same phishing analysis pipeline.
Upload or record a suspicious call. The AI transcribes it, highlights scam-pattern phrases inline, and flags whether the voice shows signs of AI cloning.
Upload a photo or video and get a confidence score for AI-generation/manipulation, with visual indicators on the flagged regions or frames.
One overall safety score built from password strength, email breach exposure, and a self-reported device security checklist β with prioritized, actionable recommendations.
Ask natural questions like "Is this SMS a scam?" or "Can I trust this website?" β the assistant reasons through it in plain language and can trigger a full formal scan inline.
Report scams, browse a community map of scam hotspots, and help protect others nearby.
End-to-end scenario:
User receives a suspicious SMS
β
βΌ
Pastes it into the Assistant β AI flags phishing language + urgency
β
βΌ
Scans the QR code inside the message β destination confirmed unsafe
β
βΌ
Uploads the follow-up scam call β AI flags likely scam attempt
β
βΌ
Dashboard recommends: block the sender, report the scam
π Live app: secure-id-ai.vercel.app π API docs (Swagger UI): secureid-ai-backend.onrender.com/docs
β οΈ The backend runs on a free-tier instance and may take up to 50 seconds to wake up on the first request after inactivity.
Frontend
- React / Vite + TypeScript
- Tailwind CSS
Backend
- FastAPI (Python)
AI / ML
- Gemini / OpenAI API
- Hugging Face models
- OCR β EasyOCR / Tesseract
- XGBoost / Random Forest (phishing scoring)
- NLP classifiers (scam text detection)
Data
- PostgreSQL
- Redis (caching, job queue)
Auth
- Firebase Authentication
Infrastructure
- Docker
- GitHub Actions (CI/CD)
- Render (backend + database hosting)
- Vercel (frontend hosting)
User
β
βΌ
React (Vite) Web App
β
βΌ
FastAPI Backend
β
βββββββββββββ¬ββββββββΌββββββββ¬ββββββββββββ¬βββββββββββββ
βΌ βΌ βΌ βΌ βΌ βΌ
Phishing Scam Text Voice Deepfake QR Identity Risk
Detection Classifier Analysis Detection Analyzer Engine
β β β β β β
βββββββββββββ΄ββββββββ΄ββββ¬ββββ΄ββββββββββββ΄βββββββββββββ
βΌ
PostgreSQL + Redis
See the full Backend PRD and Database Schema PRD for the detailed service and data model.
SecureID-AI/
βββ backend/ # FastAPI application
β βββ app/
β β βββ api/v1/endpoints/ # Route handlers (scan, auth, identity, reports, assistant, history)
β β βββ core/ # Config, database, security
β β βββ models/ # SQLAlchemy models & Pydantic schemas
β β βββ services/ # AI/ML and forensic analysis services
β βββ requirements.txt
β βββ main entrypoint: app/main.py
βββ src/ # React (Vite) frontend source
βββ public/ # Static assets
βββ docs/ # PRDs and planning documents
βββ .gitignore
βββ package.json
βββ vite.config.ts
βββ README.md
- Node.js 18+
- Python 3.10+
- PostgreSQL (local or hosted)
- API keys: Gemini/OpenAI, Firebase project credentials
git clone https://github.com/asadullatariq123/SecureID-AI.git
cd SecureID-AInpm install
npm run devThe app runs at http://localhost:5173 by default.
cd backend
python -m venv .venv
.venv\Scripts\activate # Windows
# source .venv/bin/activate # macOS/Linux
pip install -r requirements.txt
uvicorn app.main:app --reloadThe API runs at http://localhost:8000, with interactive docs at http://localhost:8000/docs.
Copy .env.example β .env in both the root and backend/ folders, and fill in your own values (see below).
Backend (backend/.env)
DATABASE_URL=postgresql://user:password@host/dbname
GEMINI_API_KEY=your_gemini_api_key
OPENAI_API_KEY=your_openai_api_key
FIREBASE_PROJECT_ID=your_firebase_project_idFrontend (.env)
VITE_API_URL=http://localhost:8000
VITE_FIREBASE_API_KEY=your_firebase_api_key
VITE_FIREBASE_AUTH_DOMAIN=your_firebase_auth_domainNever commit real
.envfiles. Only commit.env.examplewith placeholder values.
| Layer | Platform | Notes |
|---|---|---|
| Frontend | Vercel | Auto-deploys from main, root directory ., Vite framework preset |
| Backend | Render | Auto-deploys from main, root directory backend, start command uvicorn app.main:app --host 0.0.0.0 --port $PORT |
| Database | Render PostgreSQL | Connected via DATABASE_URL env var |
Every push to main automatically redeploys both the frontend and backend β no manual steps required after initial setup.
- Browser extension for real-time phishing alerts
- Native mobile app
- Enterprise dashboard for organizations
- Bank API integration
- Digital identity wallet
- Family protection mode for children and older adults
Contributions are welcome. To contribute:
- Fork the repository
- Create a feature branch (
git checkout -b feature/your-feature) - Commit your changes (
git commit -m "Add your feature") - Push to the branch (
git push origin feature/your-feature) - Open a Pull Request
Please open an issue first for major changes so we can discuss what you'd like to change.
This project is licensed under the MIT License.
- V.A. Asadulla Tariq
- G.K. Hemashankar
- G. Kavya Reddy
- S. Mounika
Built as a hackathon project focused on AI-powered scam prevention and digital safety.
Made with care to help people stay safe online β one scam check at a time.