Scam emails stopped before they're seen
CareShield Guardian keeps risky emails out of the inbox until someone the person trusts (a family member, carer or support worker) releases or deletes them. Built for the councils, care agencies and housing providers who protect older and vulnerable people.
Margaret's inbox
Claims to be from: HMRC
Why: look-alike web address, asks for bank details
Risk: High
Works with the email account they already have
Scam warnings assume a confident reader.
Many people aren't.
Fraud is the most common crime in England and Wales, and email is one of the main ways in. For someone living with cognitive decline, isolation or low digital confidence, one wrong click can mean lost savings and lost independence.
fraud incidents estimated in England and Wales in a single year.
ONS, Crime Survey, year ending March 2025of fraud reports come from people aged 60 and over, where age is known.
Home Office written answer, June 2026online adults didn't respond safely to a test scam email, and the number is getting worse.
Ofcom, Media Use and Attitudes 2026Spam filters catch most scams. The gap is what happens to the ones that get through. Today, the person is left to decide alone. CareShield makes sure they don't have to.
How CareShield Guardian works
Follow one scam email from arrival to deletion in under 30 seconds.
Set up once. Protected everywhere.
CareShield connects at the mailbox, so it works on every phone, tablet and computer the person uses, with nothing to install on their device.
Connect their email
The person, with their guardian beside them, signs in once and gives permission. They keep the same address and the same app.
Every email is checked
Four layers of checks score each new email within seconds. High-risk mail goes to Held for checking and never reaches the inbox.
A trusted person decides
Their guardian gets a plain-English text or email and taps Release or Delete. No reply in 24 hours? It goes to a backup guardian or the safeguarding team.
Simple for them. Reassuring for you.
The person being protected
- Same email address, same app
- Chooses their own guardians and protection level
- Can always see what's been held
- Unsure? One tap on Ask my guardian
Guardians
- Family, friends, carers or support workers
- Plain-English alerts by text or email
- Release or delete in one tap, with no app needed
- Backup guardian if they're unavailable
Organisations
- Safeguarding dashboard across everyone you support
- Escalation when guardians don't respond
- Spot repeat targeting early
- Staff training and onboarding included
Protection levels they choose
At set-up, the person chooses how much help they want, and they can change it or leave at any time.
Other tools warn. CareShield holds.
Most scam tools label an email and leave the decision to the reader, or alert a carer after it's already been opened. CareShield keeps it out of reach until someone they trust has looked.
Think of it as the trusted-caller call blocker, already funded by Trading Standards teams across the UK, but for email.
Safeguarding you can see
Councils, Trading Standards teams, home-care agencies and housing providers already protect the people most at risk. CareShield gives you a practical way to extend that protection to their inbox.
- One dashboardHeld emails, guardian response times and repeat targeting across everyone you support.
- Escalation built inIf no guardian responds within 24 hours, your safeguarding contact is alerted.
- Respectful by designYou see the sender and the reason for the hold, not the message itself, unless the person agrees.
- We help you roll it outOnboarding, staff training and data-protection paperwork are all included.
| Person | Claims to be | Outcome |
|---|---|---|
| M. R. | HMRC | Deleted |
| J. T. | Royal Mail | Deleted |
| A. K. | Grandson | Released |
| P. O. | Bank | Escalated |
Designed around people's rights, not just their risks
CareShield is built for UK data protection and safeguarding practice from day one.
We don't keep emails
Email content is checked in memory and never stored. For held emails we keep only the sender, subject, score and reason.
Consent and capacity
People choose their own level and guardians. Where someone lacks capacity, we act only with a person legally able to decide, following the Mental Capacity Act 2005.
UK or EU hosting
Data is encrypted and hosted in the UK or EU, under UK GDPR, with a data processing agreement for every organisation.
Independently assessed
We're working towards Cyber Essentials Plus, Google's CASA security assessment and Microsoft publisher verification.
Start free. Pay per person protected.
A year of protection costs about the same as one call blocker, and fits within the budgets councils already use for scam prevention.
Pilot
3 months, up to 25 people
- The full service
- Onboarding and staff training
- Weekly review of results with you
Organisation
Billed quarterly · £750 one-off onboarding
- Guardian alerts and escalation
- Safeguarding dashboard
- Staff training materials
- Set-up and data-protection paperwork
Family Coming soon
Per protected person
- Up to three guardians
- All three protection levels
- Ask my guardian
Cyber security, care and technology, together
Abraham Zimpah
Founder & CEO
Security+ and Google Cybersecurity certified, with financial-crime and Level 3 safeguarding training. Abraham saw the scams first-hand while supporting elderly members of his church community.
Janet Konlan
Customer Success & Safeguarding Lead
A qualified nurse with experience in the UK support sector. Janet leads onboarding, trains staff and guardians, and owns the escalation process.
Matt Varughese
Fractional CTO
Founder and CTO of Drover, where he led a 30-person product and technology team through to its acquisition by Cazoo. Matt leads architecture and security.
Frequently asked questions
Does the person need a new email address or app?
No. CareShield connects to the account they already use, so they keep their address, their app and their habits. Protection works on every device because it happens at the mailbox.
Which email providers do you support?
Outlook.com, Hotmail and Microsoft 365, Gmail, and IMAP providers such as BT, Sky, Yahoo and AOL, including the older ISP accounts many people still rely on.
Can CareShield read all of my emails?
Each new email is checked automatically, in memory, and is not stored. For held emails we keep only the sender, subject, risk score and the reason. The email itself stays in the person's own mailbox.
Is anything deleted automatically?
Never. Risky emails are held, and a person always decides whether to release or delete them. The protected person can always see what has been held.
What if the guardian doesn't respond?
If nobody responds within 24 hours, the alert passes to a backup guardian or, on organisation plans, to the organisation's safeguarding contact.
Is it suitable for people living with dementia?
Yes. The Trusted senders only level lets only approved contacts reach the inbox. It's set up with the person's consent or, where they lack capacity, with someone holding legal authority, following the Mental Capacity Act 2005.
Does it catch every scam?
No tool can promise that. CareShield greatly reduces the risk with four layers of checks and a human decision, and every guardian decision helps it learn from real UK scams.
Protect the people you support, starting this spring
We're working with a small number of councils, care agencies and community organisations on free pilots in 2027. Tell us a little about you and we'll be in touch within two working days.
- Up to 25 people protected, free for 3 months
- In-person onboarding and staff training
- Weekly results you can share with your board