cmoi.app

What it is

cMoi is a mobile app developed by NEWCO Inc. and positioned as a tool for preventing AI-driven impersonation scams. It is not a traditional endpoint antivirus product, email security gateway, or anti-fraud risk-control platform. Instead, it creates trusted groups called clublinks, where family members, friends, or colleagues share a secret phrase. When someone contacts you by phone, message, video, or another channel and their identity seems suspicious, you can ask them to say the phrase as an extra identity check.

Core capabilities and deployment

Based on the available content, cMoi’s main protection scenario is human identity verification against social engineering and AI impersonation scams. Users can create multiple clublinks for different circles, such as family, work, and friends, and invite trusted members to join. Each group has a shared secret phrase, which members can look up in the app and use for verification. Deployment is via a mobile app; the page indicates support for iPhone and Android, with download links for the App Store and Google Play.

Management, alerts, and integrations

The product mentions role management, including owner, admin, moderator, and user, with management capabilities assigned by permission level. This is useful for maintaining small groups. However, the public information does not clarify whether it supports security alerts, phrase-rotation reminders, access auditing, device binding, end-to-end encryption, an admin console, or enterprise directory integration. It also does not disclose enterprise security integrations such as API, SSO, or SIEM support. As a result, it looks more like a lightweight anti-scam tool for individuals and small teams than an enterprise-grade identity security platform.

Pricing, compliance, and access from China

The page does not disclose its pricing model, subscription fees, free tier, or payment methods, nor does it mention compliance certifications such as SOC 2, ISO 27001, or GDPR. Access from China cannot be determined from the page content alone. Even if the website is reachable, Google Play is usually limited in mainland China, and iOS downloads may depend on the regional App Store, so actual access and app-store availability should be verified directly.

Pros, cons, and who it is for

Its strengths are a straightforward concept and low barrier to use. It can provide a simple secondary verification method against newer scams such as AI voice cloning, impersonation messages, and fake video calls. Its weaknesses are that security depends heavily on user behavior and keeping the secret phrase confidential, while public information on cryptography, privacy, and compliance is limited. It is suitable for families, friends, and small coworker groups that want a manual confirmation step before high-risk requests. For enterprise anti-phishing, identity governance, or fraud detection, more comprehensive identity authentication, zero-trust, and security operations solutions should be considered.