Can I install the extension manually, without using the application?
Yes. Right click on the ScamZapper application, and click Show Package Contents. Open the Contents folder, then the Resources folder, and double-click on ScamZapper.safariextz. Safari will open and ask if you want to install the extension. The only reason we have the application install the extension is because if you want to install a newer version of the extension over the existing one, sometimes it will still have the old version unless you quit Safari, delete the old one, and then install the new one. We have the application do that for you.
How do I know the extension was installed successfully?
First, open Safari. Next, in macOS's menu bar at the top of the screen, go to Safari > Preferences > Extensions. If you see ScamZapper listed there, it is installed, and if you encounter a scam popup-producing webpage, you will get a message that the page has been blocked by ScamZapper.
How does this extension compare to something like AdBlock?
ScamZapper is not really a pop-up blocker. Like the name suggests, it's only a scam blocker, blocking a specific kind of pop-up. We think it's annoying that the pop-ups lock up Safari, and that some people fall for the scam purporting that their computer has been infected, so we want to prevent that. If you are encounter pop-ups that display ads, for example, ScamZapper does not handle these. Likewise, extensions like AdBlock usually do not block this variety of scam pop-up.
I encountered a scam pop-up before downloading ScamZapper. How do I get rid of it?
See our article about this problem here: A Browser Pop-up has Taken Over Safari. You should also follow the instructions in that article if you've already installed ScamZapper, but come across a pop-up that isn't in our database yet (you should use the ScamZapper application to report it to us). You can also launch ScamZapper and click "Troubleshoot Pop-up," and the application can do the steps outlined in the article for you.
How do I know this extension is safe?
There is no easy way to see exactly what an extension does. If you are comfortable using Terminal, you can type cd /path/to/ScamZapper.app/Contents/Resources, press the return key, and then type xar -xf ScamZapper.safariextz. If you are not that familiar with the command line interface, we have an application called Extension Unpacker ($1.99) that can do it for you. If you're worried about the safety of the extension, you might also be worried about the safety of the app. It is much easier to view an app's files than it is an extension's. You can go to the application's Resources folder, and in the Scripts folder, you will find main.scpt, which contains the code written in AppleScript used to write the app (you can do the same for the ScamZapper application, but not the extension). After you've unpacked the extension, open the folder and you can find scamstop.js, which you can open to read the JavaScript code.
Do you collect any data about me?
No. When ScamZapper blocks a scam, all we see is the URL of the scam that led you to our page. We do not see or collect any of your personal information.
I've installed the extension, but what does the application do?
The first time it is run, it will offer to install the ScamZapper Safari extension if it has not already been installed. On subsequent runs, you can use it to get rid of pop-ups in case any get through (if they aren't in our database yet). You can also use it to report new scams that aren't blocked by ScamZapper, to leave feedback on the application or extension, or to donate if you find the extension helpful.
How do I report a new scam?
Reporting is done through the ScamZapper application. Launch it, and from the main menu, all you need to do is click on "Report a New Scam." Please read the notes before reporting, and enter the full URL that displayed the pop-up. If you got rid of it, you can probably find it by opening Safari, going to "History" in the menu bar, and then "Show History." The right-hand side should have the URL. You don't actually have to visit the site.
Reports of new scams are sent to us by email. If we determine that the site you sent us displays this kind of pop-up, we will add it to ScamZapper in the next update. Updates are typically once or twice a week, assuming we get a high volume of new scam reports. Be sure to check the info page frequently, or launch ScamZapper to see when the latest update was released!
ScamZapper is blocking A LOT of scams!
If you repeatedly see our "Scam Blocked" page, and you are visiting the same webpage each time, that website itself may be malicious, or it could have been hacked. If you think that this is the case, you might want to send an email to the site's webmaster, and avoid the site until you hear back. If you are visiting different sites when you get redirected to the Scam Blocked page (assuming it is not a false positive), it could be that your Mac contracted adware which is intercepting page loads in Safari and taking you to those pop-ups. Here is a program that we recommend to remove adware: Malwarebytes for Mac (we have no affiliation with it). Note that if you only see ScamZapper's "Scam Blocked" page occasionally, there is no action you need to take.
What is this "Unique Report Identifier" I see included with my scam reports?
We get a high volume of reports for various scam websites. This is great, because it allows us to build a robust database of scams to ensure the ScamZapper extension can block as many as possible. However, because of the number of reports we get, we go to great lengths to make sure that the reports we receive are relevant. Some people use the report function to report any ad they come across, and that's not what ScamZapper is for. It is for dealing with those nuisance pop-ups that cannot be closed, and claim your computer has a virus or has been seized. To the point: we came up with the "Unique Identifier" system so that we can keep track of who is submitting reports without collecting any personal information. If you report irrelevant sites, your identifier may be placed on a deauthorization list. We know that accidents happen, and you might not be aware of what to report. That's why we have two levels of deauthorization lists. On the first level, you only need to review the criteria for scams that you should report (see "What websites should I Report?" above), and then you should regain the ability to report. This allows us to focus only on the scam websites that we are targeting.
What is "Aggressive Mode?"
ScamZapper's Safari extension, as of version 2.0, has a setting called "Aggressive Mode." When on, the extension will block any webpage that meets a certain set of criteria, which is more effective than maintaining a database of webpages that produce scam pop-ups. However, although we have carefully considered the criteria that we use to check for scam webpages, it is possible that it may pick up a false positive, meaning that a legitimate site met all the criteria and was blocked. You can email us to let us know if you come across a site like this, and let us know what the URL is so we can investigate. If Aggressive Mode is preventing you from accessing a site that you want to access, you can disable it by going to Safari > Preferences > Extensions > ScamZapper, and uncheck the box for Aggressive Mode. ScamZapper will still be able to block sites that are in its database of known scam pop-ups. More information is available here.
I turned Aggressive Mode on/off, but I don't see any changes. Why?
Sometimes, Safari must be relaunched in order for changes made to an extension to take effect.