BaitBlock shield with a fish hook

Phishing, caught
before you bite.

The web is full of fake emails and sites pretending to be something else, and when you lose attention, you too can fall into a trap and enter your password or credit card information.

BaitBlock checks every page you visit to verify it's not a phishing scam. It uses an on-device AI model which costs you nothing — seriously, it's free and will always protect you, your parents, your kids, and anyone you share it with.

Chrome 138+ · 100% local · no account, no tracking, zero network requests

Why BaitBlock exists

It started with one email: “Your recent post doesn’t comply with our community guidelines.” Perfect branding. An official-looking button. The password went in before the doubt did.

The sender was a lookalike domain. The button hid its destination behind a redirect. The page collected the password twice, then asked for a 2FA code. Every one of those tricks is mechanically detectable — so we built the tool that detects them, and gave it an on-device AI that reasons like a security analyst.

Three layers between you and the hook

🌐

Site guard

The moment a page asks for a password, card, code, or ID, BaitBlock checks whether the site is what it claims to be — lookalike domains, borrowed logos, forms that submit your input elsewhere. Fakes get frozen before you can type a character.

📧

Gmail scanner

Every email you open is scanned instantly. Cloaked links are unwrapped to reveal their real destination, impersonating senders are called out, and dangerous links are blocked until you explicitly unlock them.

🤖

On-device AI

Chrome's built-in Gemini Nano reasons over borderline cases like a security analyst — and explains its verdict in plain language. It runs entirely on your machine and works offline.

🚦

Live status light

The toolbar shield is green when all's clear, blinks yellow while checking, and turns red when something's caught. One click shows the verdict for the site you're on.

⚖️

Proportional, not paranoid

Pages collecting real secrets can be paused outright. Pages asking for simple details get at most a quiet note. Domains that pass are remembered — zero overhead on sites you use daily.

🔒

Absolute privacy

No email content, no browsing history, no data of any kind ever leaves your machine. No accounts. No tracking. The extension makes zero network requests.

See it in action

BaitBlock flagging a phishing email in Gmail
A real phishing email caught in Gmail — every reason explained, every dangerous link blocked.
BaitBlock freezing a fake login page
The matching fake login page, frozen before a single keystroke.

Your data never leaves your device. Ever.

BaitBlock's entire analysis — rules and AI alike — runs locally in your browser. Read the whole policy; it's refreshingly short.

Read the privacy policy