Skip to content

Roadmap

ScamShield AI has a multi-phase expansion vision. The current system is Phase 1 (core honeypot). Future phases build on this foundation.

Completed

Phase 1: Core Honeypot Engine

  • [x] Scam classification (12 types via Gemini Flash)
  • [x] 3 culturally-authentic Indian personas
  • [x] 11 evidence extraction types (regex + keywords)
  • [x] Session management with Firestore
  • [x] Delayed callback via Cloud Tasks
  • [x] CI/CD with Workload Identity Federation
  • [x] Streamlit dashboard (9 pages)

Phase 2: Production Hardening

  • [x] Security audit (4 critical findings fixed)
  • [x] Prompt injection sanitization
  • [x] OIDC token verification
  • [x] Rate limiting (per-session)
  • [x] Constant-time API key validation

Phase 3: Evaluation Optimization

  • [x] Per-turn callbacks
  • [x] Scam detection from turn 1
  • [x] Phone number +91 prefix preservation
  • [x] Regex accuracy improvements

Planned

Phase 4: Multilingual Expansion

  • [ ] Hindi/Hinglish native responses
  • [ ] Tamil, Telugu, Bengali support
  • [ ] Language detection with automatic persona switching
  • [ ] Devanagari digit transliteration

Phase 5: Advanced Engagement

  • [ ] 5-stage conversation depth tracking
  • [ ] Strategic delay patterns per persona
  • [ ] Pressure tactic detection
  • [ ] 2+ new personas (regional diversity)

Phase 6: Intelligence Network

  • [ ] Cross-session scammer profiling
  • [ ] Evidence timeline visualization
  • [ ] Network graph linking (shared UPI IDs, phone numbers)
  • [ ] Scammer behavior scoring

Phase 7: Platform Expansion

  • [ ] WhatsApp Business API integration
  • [ ] Telegram bot webhook
  • [ ] Voice call support (speech-to-text → LLM → text-to-speech)
  • [ ] Email honeypot

Phase 8: Advanced Classification

  • [ ] Multi-label classification (primary + secondary scam type)
  • [ ] Few-shot learning with real examples
  • [ ] Confidence calibration
  • [ ] Novel scam type detection

Phase 9: Scale & Operations

  • [ ] Multi-region deployment
  • [ ] A/B testing framework for personas
  • [ ] Automated reporting to Indian Cyber Crime portal
  • [ ] Real-time alerting system

Contributing

Want to work on any of these? Check the contributing guide and open an issue to discuss your approach.