FINDINGspam.
Jump to what to dospam.off_platform_contact
The message invites the reader to continue on a messenger.
What it looks at#
Fires on an invitation to move to a messenger, in any of these forms:
- a Telegram or WhatsApp link (
t.me/,telegram.me/,wa.me/,api.whatsapp.com/,chat.whatsapp.com/); - “WhatsApp me”, “Telegram me”, “Signal me”;
- “contact me on Telegram” and close variants;
- “Telegram: @handle” or “Telegram username: handle”;
- “Skype: live:…” identifiers.
A bare mention does not fire. “Do you support WhatsApp?” and “call me back on +46 70 123 45 67,
I prefer WhatsApp” are ordinary and stay clean. A customer who pastes their own wa.me link is a
known false positive.
The finding carries no location, and nothing from the message is echoed back.
Why it matters#
Scams, cold outreach and crypto pitches ask to be continued somewhere unmoderated and unsearchable, away from your spam filters.
What to do#
Low severity. Combine it with other findings before acting: on its own it is a reason to look, not a reason to reject.