Make your parents' phone harder to scam.

Going home for Diwali? Plug in their phone, open your coding agent and say make this phone safe. Twenty minutes: a read-only check first, changes only with their yes, nothing deleted, USB debugging off at the end.

Get it on GitHub How it works

What scams use, and what it checks

A caller "from the bank" or "the police" asks them to install AnyDesk or TeamViewer and read out a codeRemote-control apps are flagged and switched off if they agree. If the family uses one to help, it stays.
A fake "KYC update" or "electricity bill" app arrives as an APK file on WhatsAppWhatsApp, Chrome and file managers lose the right to install apps. They keep working; installing from the Play Store is unaffected.
An app reads one-time passwords from SMS, the screen or notificationsApps from outside an app store lose SMS, contacts and call-log access, and third-party accessibility and notification access is removed, with their yes. Banking and UPI apps from the Play Store keep SMS access.
Things adb cannot changeDevice admins, the default SMS app, Play Protect, an old security update, WhatsApp storage: step-by-step instructions to do together.

Three steps

  1. On the phone: Settings › About phone › tap Build number seven times, then Developer options › USB debugging on. Plug it into your computer.
  2. On the computer: install adb, then
    git clone https://github.com/DoAideAi/DoAide-Debloat && cd DoAide-Debloat
    Open Claude Code, Codex, Hermes or Gemini CLI in that folder and say: Make this phone safe. Follow recipes/parent-mode.md.
  3. Do the rest together: WhatsApp's Silence unknown callers and two-step verification, a family code word for any call that asks for money, and 1930 saved as the cyber crime helpline. No police officer, bank or courier asks anyone to install an app or stay on a video call: "digital arrest" does not exist.

What it will not do

NeverUninstall an app, delete a message, a photo or WhatsApp media, root the phone, or change anything before the read-only check has been shown.
Never touchesThe home screen, keyboard, phone, messages and browser apps, read live from the phone.
AlwaysReads every change back from the phone, records it, and undoes all of it with one command. Switches USB debugging off at the end. If it cannot read part of a phone, it says so instead of calling the phone clean.

A card to share, without anything personal

At the end it makes a card with counts only: never app names, the phone model or whose phone it is.

PHONE SAFETY CHECK 5 scam risks fixed on Mum's phone · 9 found 2 apps can no longer install APK files 1 remote-control app switched off 1 app lost screen or notification access 2 SMS and contacts permissions taken back USB debugging switched off again Make your parents' phone harder to scam Free and open source. Every change can be undone. DoAide Debloat · parent mode github.com/DoAideAi/DoAide-Debloat No app names, phone numbers or personal details on this card.
Example from a test run on a simulated phone. Yours shows what was actually changed.

If money has already been lost

Call 1930, the National Cyber Crime Helpline, at once and report at cybercrime.gov.in. Call the bank to block the account and cards. Do not install anything a caller suggests to "recover" the money.

Status

New, and part of DoAide Debloat. Tested against a simulated phone; not yet on many real ones. Ran it? A device report (model and what the check showed, nothing personal) makes it safer for the next family.