91% of cyberattacks start with a phishing email — but spam filters only catch bad links and known malicious domains. Modern scams use psychological manipulation instead: artificial urgency, authority impersonation, emotional pressure, and forced secrecy. Non-technical users can't recognize these tactics.

PhishLighter uses AI to detect the psychology behind social engineering — not just the technical indicators. Paste any email or message, and PhishLighter instantly highlights the exact manipulative phrases in the text with color-coded severity. Hover over any highlight to read a plain-English explanation of why that language is dangerous and what psychological trick is being used.

It detects 10 categories of manipulation tactics including artificial urgency, authority impersonation, fear/threats, reward baiting, forced secrecy, and technical deception. The tool includes 5 built-in sample emails demonstrating real-world attack types (CEO fraud, credential phishing, package delivery scam, crypto investment scam) plus a legitimate email to prove no false positives.

Tutorial is in the github repo.

Built With

  • groq-api-(llama-3.3-70b)
  • next.js-14
  • ollama
  • react-18
  • tailwind-css-3
Share this project:

Updates

Submission history