$76M
Caribbean Cruise Line
Prerecorded calls soliciting cruise business.
We hunt spam texters.
Somebody paid to send you that text. Hand us the screenshot and we’ll track it back to them — who they are, what the federal courts already say about them, and what you can do next.
Your phone is probably holding a dozen of these. The law counts more than one message from the same sender, so a backlog is worth more than the newest one.
Laboratory procedure
How a file is built
- Evidence is logged. Your screenshot is stored and hashed. The hash goes on the file, so anyone reading it later can confirm the image was not altered after submission.
- The message is transcribed. Sender, body, links, timestamps, and whether an opt-out was sent and what arrived afterwards.
- The origin is classified. A registered short code, a 10-digit long code, a toll-free number and an email gateway are four very different things, and they set a ceiling on what can be established at all.
- The links are followed. Redirect chains usually end at the advertiser who paid for the message rather than the sender.
- Public records are searched. Federal court dockets, checked for the parties we identified.
- It is graded and written up. See below.
How the grade is decided
- Tier A
- A named advertiser, at high confidence.
- Tier B
- A named intermediary; the advertiser is probable but not established.
- Tier C
- Infrastructure only — a valid subpoena target, but no brand behind it yet.
- Tier D
- Unattributable. Usually an offshore operation nobody can recover from.
The origin sets a ceiling the write-up can lower but never raise. An anonymous gateway cannot produce a Tier A file no matter how convincing the message looks.
What happens next
If a file shows a pattern worth pursuing, you can choose to have it referred to a licensed attorney who handles this kind of claim. They decide whether to take it. If they do, they represent you — not us — and you deal with them directly.
What we do not do
- We are not a law firm and we do not give legal advice.
- We do not send demand letters, and we never contact a sender on your behalf.
- We do not file anything with any court.
- We never take a percentage of any recovery. If money is ever recovered it comes from a settlement, through your attorney, and not through us.
- We do not decide whether a law was broken. Our file records what we found; that question belongs to an attorney and ultimately to a court.
Some spam comes from operations nobody can touch. When that’s the answer, we say so instead of selling you hope. An analysis is not a legal determination, and nothing here is legal advice or a prediction of any outcome.
Public record
The law has teeth
Unwanted marketing calls and texts are governed by the Telephone Consumer Protection Act. These are real, publicly docketed federal cases, resolved for the amounts shown.
$75.5M
Capital One
Autodialed collection calls to roughly 21 million mobile numbers.
$61M
Dish Network
Telemarketing calls placed by retailers acting on its behalf.
$49.9M
US Coachways
Text messages sent without consent.
$45M
AT&T Mobility
Debt collection calls to reassigned numbers.
What these are, precisely. Each is a settlement: an agreement to resolve a claim. A settlement is not a finding of wrongdoing, and in most of these the defendant expressly denied doing anything unlawful. They are listed because they are public records showing what this statute is worth when a pattern is proven — not as accusations, and not as a promise about any other case. We have no involvement in any of them.
What the statute actually requires
- Registry
- More than one marketing message in twelve months, from the same sender, to a number on the Do Not Call registry.
- Opt-out
- A business must honour STOP regardless of whether you consented earlier.
- Per message
- $500, which a court may increase up to three times for a knowing violation. Discretionary, not automatic.
- Who pays
- Often the advertiser who bought the campaign, not just the company that pressed send.
Rules vary by state and by federal circuit, and they change — a federal appeals court narrowed part of this in July 2026. Your own situation is a question for an attorney.
Analysis in progress
- Evidence logged & hashed
- Message transcribed
- Origin classified
- Redirect chain followed
- Registrant checked
- Federal dockets searched
- Report being written
Nothing here is on a timer. A line that sits is a lookup still running.
Evidence intake
Each one is analysed separately. You can leave this page — they will be in your files when they finish.
- Case №
- Received
- Specimen
Origin
- Route
- Sender
Subscriber status
Subject
Prior record
Analyst note
Linked reports
Exhibit
The screenshot this file was built from. Only you can open it.
Summary
STFU Crime Lab
SENDER
ROUTE
PRIOR CASES
AFTER OPT-OUT
ALSO REPORTED BY
STATUTORY RANGE
FINDING
*** RETAIN THIS REPORT ***
An analysis, not a legal determination. Whether
any law was broken is a question only a licensed attorney can answer.
Sign in to save to your account
Complainant intake
Your details
Each of these changes what the lab can establish. None of it is marketing data.
Case register
Your files
Every text you have reported, newest first.
Nothing here yet. Submit a screenshot and it will be filed.
A file appears here once its analysis finishes, which takes about half a minute.
Terms of service
Terms of service
Last updated 29 August 2026
1. What this service is, and who runs it
STFU (“we”, “the service”) accepts a screenshot of a text message you received, analyses it, and returns a case file describing what we were able to establish about its origin.
This site and service are operated by Shand Labs LLC, a Florida single-member limited liability company, doing business as stfu.report (“we”, “us”, “our”), of:
Shand Labs LLC
1691 Forum Pl, Ste B #492
West Palm Beach, FL 33401
United States
2. We are not a law firm
We are not a law firm, we do not employ your attorney, and nothing the service produces is legal advice. Using the service does not create an attorney–client relationship with us or with anyone else. A case file is an analysis of available evidence, not a legal determination that any law was broken. Only a licensed attorney can advise you on your situation, and only a court can decide it.
3. What we do not do
- We do not send demand letters and do not contact any sender on your behalf.
- We do not file anything with any court or agency.
- We do not take a percentage of any recovery, and we do not handle settlement money. Any recovery reaches you through your own attorney, not through us.
- We do not represent that you have a claim, that a claim is worth any amount, or that any outcome is likely.
4. Statutory ranges
Where a case file shows a statutory range, it is the range written into the statute for a qualifying violation. It is not a valuation, not an offer, not a prediction, and not a promise of payment. Whether any message qualifies is a legal question we do not answer.
5. Referrals to attorneys
If you ask us to, we may refer your case file to a licensed attorney who handles this kind of claim. The attorney decides independently whether to take it. If they do, they represent you and you deal with them directly under their own engagement terms. We are not responsible for their advice, their conduct, or the outcome.
6. Your submissions
You keep ownership of everything you upload. You grant us permission to store and process it in order to produce your case file and to operate and improve the service. You confirm that you received the message you are submitting and that you are entitled to share it. Do not upload content that is not yours to share.
7. Accuracy
Attribution is inference from public and observable evidence, and it can be wrong. Sender identity, company names, court records and campaign links are provided without any warranty of accuracy. Verify anything you intend to rely on. Where we cannot establish something, the case file says so.
8. Acceptable use
Do not use the service to harass any person or company, to submit fabricated or altered evidence, to attempt to access another person’s case files, or to disrupt or overload the service. We may suspend access for any of these.
9. No warranty; limitation of liability
The service is provided “as is”, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits or lost opportunities, arising from your use of the service. Nothing here limits liability that cannot lawfully be limited.
10. Changes
We may change these terms. If we make a material change we will update the date above and, where we have your email address, tell you. Continuing to use the service after a change means you accept it.
11. Governing law
These terms are governed by the laws of the State of Florida, without regard to its conflict-of-laws rules. Nothing here removes any right you have under the consumer-protection law of the place you live, or requires you to bring a claim somewhere that law does not allow.
12. Contact
Questions about these terms: support@stfu.report
Shand Labs LLC
1691 Forum Pl, Ste B #492
West Palm Beach, FL 33401
United States
Privacy policy
Privacy policy
Last updated 29 August 2026
This describes what the service actually collects and where it actually goes. It is written against the deployed system rather than from a template.
This site and service are operated by Shand Labs LLC, a Florida single-member limited liability company, doing business as stfu.report (“we”, “us”, “our”), of:
Shand Labs LLC
1691 Forum Pl, Ste B #492
West Palm Beach, FL 33401
United States
We are the controller of the personal information described in this policy — that is, we decide what is collected and why.
1. What we collect
- Screenshots
- The image you upload. A screenshot of a text conversation often contains more than the message — your name, your number, other messages in the thread. Only upload what you are willing to share. Your browser shrinks and re-encodes it before it leaves your device, so what reaches us is a smaller copy rather than the original file.
- Extracted text
- Sender, message body, links, timestamps, and whether an opt-out was sent and what arrived afterwards.
- Anonymous session
- A random identifier stored in your browser so we can show you your own results before you have an account. It is not linked to your identity and carries no advertising value.
- Account
- Your email address, used only to send a sign-in code.
- Profile
- If you complete intake: name, mobile number, state, ZIP, and whether you say your number is on the Do Not Call Registry and roughly when it was added.
We do not ask for and do not want payment details, government identifiers, or health information. There is nothing to pay for.
2. What we do with it
We use it to produce your case file, to group messages into campaigns, to improve attribution accuracy, and — only if you ask — to refer your case file to an attorney. That is the complete list.
3. Who else touches it
- Amazon Web Services
- Hosting, storage and databases. Data is stored in the United States (us-east-1).
- Amazon Bedrock
- Reads your screenshot to extract the message and writes the summary. Bedrock does not use your content to train models.
- CourtListener
- Searched for public federal court records. We send the party names we identified — never your data.
- Links in the message
- We follow them from our own infrastructure, not from your device, so the sender does not learn that you opened anything.
4. What we never do
- We do not sell your data, and we do not share it with data brokers or advertisers.
- We do not add your number to any marketing list.
- We do not text you. The service sends no SMS at all.
- We do not give your information to the company that sent the message.
5. How long we keep it
- Uploaded images
- Kept for as long as your case file exists, so the file can always show the screenshot it was built from. They used to be deleted automatically at 180 days; a permanent file whose exhibit disappeared at six months was worse than one that never showed an exhibit. Deleted whenever you ask — that is now the route, rather than a timer.
- Case files
- Kept while your account exists, because their value is the record they build over time. Deleted on request.
- Campaign data
- The links between senders are kept in a form that does not identify you, and survive deletion of your account.
6. Your choices
Write to support@stfu.report and you can ask for a copy of what we hold about you, correction of anything wrong, or deletion of your account and its case files. We will confirm when it is done. If you are in a place with statutory privacy rights — including California, Colorado, Connecticut, Virginia and the EU/UK — those rights apply and we will not treat you differently for using them.
7. Who can see your screenshots
Only you. The storage blocks public access outright, and the only way an image comes back out is a signed link that expires in five minutes and is issued solely to the account that submitted it. There is no public URL for any screenshot, and one cannot be created by guessing a case number.
8. Security
Traffic is encrypted in transit and data is encrypted at rest. Sign-in is passwordless: we send a one-time code and there is no password to steal from us. Access to production data is restricted. No system is perfectly secure, and we will not claim otherwise.
9. Children
The service is not intended for anyone under 18 and we do not knowingly collect their information. If you believe a child has used it, tell us and we will delete the data.
10. Changes
If we change this policy materially we will update the date above and tell you where we have your email address.
11. Contact
For any request under this policy, including access, correction and deletion: support@stfu.report, or by post to the address above. We answer either route.
Accessibility
Accessibility
Last updated 29 August 2026
People dealing with unwanted messages are not a narrow group, and a tool that only works for some of them is not doing its job. We aim to meet WCAG 2.1 Level AA.
What is in place
- Semantic HTML with real headings, lists and description lists, so a screen reader can navigate the structure rather than a wall of text.
- Every control is a real button, link or form field, reachable and operable by keyboard.
- Analysis progress is announced through a live region, so you are told what is happening without needing to watch it.
- Text and background colours are chosen for contrast, and colour is never the only way information is conveyed — a finding is always stated in words as well.
- Animation is switched off entirely when your system asks for reduced motion.
- Layout is responsive and works at 320px and when text is enlarged.
Known gaps
Stated plainly, because a conformance claim we have not verified would be worth nothing:
- We have not completed a full third-party audit. Our testing is internal.
- The sign-in dialog does not yet trap keyboard focus, so tabbing can reach the page behind it.
- The rubber-stamp grade is styled text, which reads correctly to a screen reader, but its rotation may render awkwardly at very large zoom.
- Uploading requires a screenshot, which is inherently visual. We have no non-visual route today and consider that a real limitation.
Tell us
If something here blocks you, write to support@stfu.report and say what you were trying to do. We treat access problems as defects, not feature requests, and we will tell you what we are doing about it. If you need a case file in a different format, ask and we will provide one.
Shand Labs LLC
1691 Forum Pl, Ste B #492
West Palm Beach, FL 33401
United States