Ultari NEO: Scam App Check

★ All Ultari NEO features are available in the PC (Windows) version → https://ultarineo.com
★ Optional BUSINESS yearly plan for work phones.

Ultari NEO is a second opinion next to your antivirus. It looks for the apps that phone scams actually rely on, and checks suspicious messages and your Wi-Fi — entirely on your phone.

WHAT IT CHECKS
• Where every app came from: the store, a browser download, a messenger file or an unknown file
• Powerful abilities that scam apps need: screen control (accessibility), reading texts and verification codes, intercepting or redirecting calls, drawing over other apps, device admin, hidden icons
• Apps whose name claims to be a bank, the police or a government office but did not come from a store
• Remote-control apps that scammers ask victims to install, and patterns of spy (stalkerware) apps
• Other warning signs: out-of-store apps with VPN capability, apps signed with a development key, apps built for old Android that get risky permissions just by being installed, out-of-store apps installed recently
• Phone settings: no screen lock, USB debugging or developer options on, an old security update, an Android version that no longer gets security updates, traces of rooting

CHECK A MESSAGE
Share or paste a suspicious message into Ultari NEO. You see the real address behind each link, whether it downloads an app file (.apk), and which scam pattern it follows — parcel delivery, fines, family impersonation, refunds, loans, investment groups. Your inbox is never read.

WI-FI AND NETWORK CHECK
Flags open (no password) or WEP Wi-Fi, public Wi-Fi with a sign-in page, a proxy quietly set on the network, user-installed CA certificates that can intercept HTTPS, unfamiliar DNS servers, and public Wi-Fi used without a VPN or Private DNS. A proxy plus such a certificate is an interception setup, shown as a risk. It also tells you when wireless debugging is on.

PERMISSION MAP AND APP BEHAVIOR
See which apps can use the camera, mic, location (incl. "all the time"), texts, call logs, contacts, phone, calendar, body sensors, photos/files and nearby devices — out-of-store apps first.
Optional: only if you allow "Usage access", Ultari NEO shows how much each app uploaded in the background over the last 7 days and marks apps that sent data while you were not using them. This data never leaves the phone.
Cleanup (same access): apps unused for 30+ days and the space you could free, "sleeping" apps holding camera, mic, location, SMS, call log or contacts permissions while unused, apps with a large cache or size, and a storage overview. It only suggests; you uninstall or clear cache yourself in Android's own screens.

EMERGENCY CHECK, SCORE AND REPORT
After a suspicious call, Emergency check shows four steps to take, finds remote-control and takeover apps directly, and has a button to call the police. A security score out of 100 sums up the result, and you can share a check report with the reasons as they are — with family, the police or your bank.

DAILY CHECK
Once a day, in the background, it checks for newly installed risky apps and alerts you. You can turn it off.

YOU DECIDE
Every result shows its reasons; suspicion is shown as a signal, not proof. Ultari NEO never removes anything by itself — the Uninstall button opens Android's own confirmation, and you can mark apps you trust.

PRIVATE BY DESIGN
• No internet permission: your app list and messages never leave the phone
• No account, no ads, no tracking
• The analysis engine runs on the device

WHAT WE CANNOT SEE
Android does not let one app watch what other apps are doing right now, so Ultari NEO cannot see live activity. Even with Usage access it sees only how much an app uploaded in the background — not what it sent or where. Without root it cannot see other devices or traffic on the same Wi-Fi. It looks for traces of rooting, but cannot detect system tampering on a rooted phone. Keep your antivirus.

Contact: projectteamforyou@gmail.com · PROJECTTEAMFORYOU

Recent changes:
1.2.1: The suspicious-text check now reads 12 languages. It finds parcel, tax-refund, fine and family-impersonation (broken phone, new number) scams in Japanese, Chinese, Spanish, French, German, Portuguese, Russian, Hindi, Indonesian and Arabic, and flags addresses like track-jp.com or gov-de.com that imitate a country's agencies. Genuine notices from carriers' and shops' own domains are not flagged. Everything is still checked on your phone, and the app has no internet permission.