Verifying the Legitimacy of a Facility's Official App

01

Families who find themselves searching urgently for a loved one in custody often encounter a confusing maze of apps, websites, and payment portals — all claiming to be the official channel for commissary deposits, phone calls, or inmate communication. The question of how to know if the facility's official app is legit is not a minor administrative detail. Getting it wrong can mean losing money to a fraudulent site, sharing sensitive personal information with a scam operation, or simply failing to reach the person who needs your support most.

The stress of those first hours after a loved one is booked is exactly the environment where predatory services thrive. Scam apps and lookalike deposit portals are designed to appear at the top of search results, mimic the visual language of real government sites, and pressure families into acting before they have a chance to think. A methodical verification approach — not a fast one — is the only reliable defense.

02Why App Legitimacy Matters More Than Families Expect

When a family member is booked into a county jail, the facility contracts with specific vendors for phone services, video visits, and commissary deposits. Those vendors are approved, licensed, and integrated into the jail's records management system. Any app outside that approved network cannot actually deliver your deposit or your phone credits to your loved one's account, no matter what it promises.

The consequences of using an unverified app range from inconvenient to devastating. At minimum, you may deposit money that never reaches your loved one and must then navigate a difficult refund process. At worst, you may hand over bank account details or a debit card number to a criminal operation that has no connection to the jail at all.

This is why verifying legitimacy before entering any payment information is not optional — it is the first step of responsible jail navigation. Understanding the landscape of legitimate providers versus impostors requires a clear framework, not just a gut check.

03Step One: Start at the Facility's Official Website, Not a Search Engine

The most reliable source for identifying approved communication and commissary apps is the jail facility's own official website. Every county jail and most municipal detention centers maintain a government-issued site — usually at a .gov or .us domain — that lists their contracted vendors and explains how families can deposit funds, schedule visits, or set up phone accounts.

Do not begin your search by typing "jail commissary app" or similar phrases into a search engine. Paid advertisements frequently place imitation services above official results, and even organic search rankings can surface third-party sites before the real government page. Instead, search specifically for the name of the facility — for example, "Riverside County Sheriff inmate services" — and navigate directly to the official county or city government domain.

Once on the official site, look for a section labeled something like "Inmate Services," "Family Resources," or "Visitation and Communications." The approved vendor list is typically found there. If the site does not list a specific app by name, call the facility's public information line. Facility staff are accustomed to these questions and can confirm which third-party providers are authorized.

It is also worth looking for the facility's official social media presence, particularly if it is operated by a sheriff's office. Many sheriff departments post announcements when new vendor contracts are awarded or when old contracts expire, which can alert you to changes in the approved app landscape.

04Step Two: Scrutinize the App Store Listing

Once you have the name of the vendor identified by the facility, search for that vendor's app in either the Apple App Store or the Google Play Store. The store listing itself contains several signals that help you distinguish the genuine app from lookalikes.

First, check the developer name listed under the app title. The developer name should match the vendor company name exactly, not a variation of it. Legitimate providers in the correctional communications space have established, searchable histories. If the developer name is unfamiliar or differs slightly from the vendor name the facility gave you, treat it as a red flag and verify by calling the facility again.

Second, examine the app's publication history. Established vendors have apps that have been live in the store for years and show a consistent update history. A legitimate commissary or communication app will have hundreds or thousands of reviews spanning multiple years. An app with a handful of reviews and a first publication date from recent months — particularly if it is priced for download — warrants serious scrutiny.

Third, look at the permissions the app requests. A legitimate deposit or communication app will request access to your camera for document scanning, your contacts for convenience, and your network connection for data. It should not request access to your SMS messages, call logs, or location in ways that go beyond its stated function.

05Step Three: Verify the Vendor's Independent Online Presence

A legitimate correctional communications or commissary vendor maintains a real, established web presence entirely apart from their app store listing. Searching the vendor's company name directly should surface their primary website, which should be hosted at a professional domain that matches the company name — not a generic or hyphenated variant.

On that website, look for clear business contact information: a physical address, a customer support phone number, and a published privacy policy. Scam operations frequently omit one or more of these elements or bury contact information behind forms that lead nowhere. A real vendor has a real support team, because they handle customer complaints and deposit corrections at scale.

Check whether the vendor's website mentions specific facility partnerships. Established providers typically list the states and sometimes the specific counties they serve, since this is a selling point for their legitimate operations. If a site claims to serve "all facilities nationwide" without any specificity, that vagueness is itself a warning sign.

You can also verify a vendor's business registration through state business entity search tools, which are publicly available in most states. Confirming that a company is a registered legal entity in at least one state does not guarantee legitimacy, but the complete absence of any registration is a serious red flag. A company handling financial transactions on behalf of incarcerated individuals should have clear regulatory footprints.

06Step Four: Apply the Official Authorization Test

The single most definitive check you can perform is what might be called the official authorization test: ask the facility directly whether they have an authorized relationship with the specific app or website you are considering. This takes five minutes and eliminates ambiguity entirely.

When you call, ask the staff member three specific questions. First, ask which company or companies are currently approved to process commissary deposits for that facility. Second, ask for the name of the approved phone or video visit provider. Third, ask whether the specific app name you found is on their approved vendor list. Write down the answers and the name of the person who gave them.

This approach works because facility staff have a vested interest in directing families to the correct channels. Deposits sent to unauthorized services create administrative headaches and sometimes legal complications for facilities. The staff are allies in this process, not gatekeepers.

If a facility's phone line is difficult to reach, look for the facility's public information or family liaison email address. Many facilities, particularly larger county jails, have dedicated family communication staff whose role specifically includes answering questions about approved services and how to send money to someone in jail through the right channel.

07Step Five: Check for the Absence of Red Flags in the Payment Interface

After confirming through the facility that a vendor is approved, spend a few minutes reviewing the payment interface before entering any financial information. Several specific features distinguish legitimate payment flows from fraudulent ones.

A legitimate payment interface will show a secure connection — look for the padlock icon in your browser's address bar and confirm the URL begins with https. This is a minimum standard, not a guarantee of legitimacy, but its absence is disqualifying. A real vendor will never ask you to send payment via wire transfer, cryptocurrency, or gift cards. Those are universal markers of fraud.

Legitimate providers clearly disclose any fees before you reach the payment confirmation screen. They also clearly identify where the money goes — to the specific facility's commissary account — rather than to a vague "inmate fund." If the fee structure is hidden, if the facility name is never mentioned by name in the interface, or if the confirmation email contains company names that differ from the app you downloaded, stop and verify again.

08Recognizing Lookalike Sites and Domain Spoofing

One of the more technically sophisticated tactics used by fraudulent services is domain spoofing — registering a web domain that closely resembles a legitimate vendor's address by changing a letter, adding a hyphen, or substituting a similar-looking character. A family under stress who types in a URL from memory is vulnerable to landing on a spoofed site that is visually identical to the real one but routes payments elsewhere.

To protect against this, never type a vendor URL from memory. Navigate to the vendor's site either from a link on the official facility page or from the verified app store listing. If you received the URL in a text message or email you did not explicitly request, do not click it. These messages — even if they claim to be from the facility or the vendor — may be phishing attempts.

It is also worth knowing that legitimate correctional vendors do not cold-contact families by text or phone to offer deposit services. Real providers operate inbound — families come to them, not the other way around. Any unsolicited outreach offering to process a deposit on your behalf should be declined immediately and reported.

09How Search and Referral Services Fit Into the Verification Process

When a family is trying to find a loved one in jail for the first time, they often turn to a county jail inmate search service before they have had any contact with the facility directly. An information and referral service can help families identify which facility is holding their loved one, confirm the correct official vendor, and receive step-by-step verified deposit instructions — saving the exploratory time that makes families vulnerable to impostors.

InMato LLC is an information, search, and referral service built specifically for this navigation problem. InMato covers 289 county jail systems across 14 states and connects families with only official, licensed providers — never lookalike payment sites. Families who use the InMato app or visit inmato.com to find a loved one in jail free of charge receive verified routing directly to the correct facility vendor, which reduces the window of exposure to scam services.

The distinction InMato draws is specific and important: InMato never touches user money. Deposits go directly to the official facility provider on their secure system. InMato is not a money transmitter or payment processor — it is a referral and information service that ensures families reach the right destination. This structure removes one entire category of risk from the deposit process.

For families who want ongoing support beyond the initial search, InMato+ provides jail booking alerts, release and transfer notifications, court date alerts, and real-time case tracking at $19.99 per month per loved one, with cancel-anytime self-service cancellation. Families who only need the county jail inmate search function can use InMato Core at no cost and with no time limit.

10What to Do If You Realize You Used an Unauthorized Service

If you followed a link or downloaded an app and later learned it was not authorized by the facility, move quickly but methodically. The first step is to contact your bank or card issuer and report the transaction as potentially unauthorized. Depending on your bank's policies and how recently the transaction occurred, you may be able to dispute the charge.

Next, change any passwords associated with the account you used. If the unauthorized service collected your email address and a password, and if you reuse that password elsewhere, update it on every account where it appears. This protects against credential-stuffing attacks that often follow data exposure.

Report the unauthorized service to the Federal Trade Commission using the FTC's online reporting tool at reportfraud.ftc.gov. You may also report it to your state's attorney general, particularly if the site appeared to be registered in your state. These reports contribute to enforcement actions that protect other families. Document the experience — screenshots, transaction records, any confirmation emails — before you close or delete anything.

Finally, contact the facility to confirm that no deposit was received, so you and your loved one have an accurate picture of what funds are actually in their account. Facility finance staff can check and, in some cases, coordinate with legitimate providers to help resolve the situation.

11Building a Verification Habit for Ongoing Communication

Verifying legitimacy is not a one-time task. Vendor contracts between jails and communication providers change. A legitimate app today may be replaced by a different approved vendor in six months. Families who maintain contact with an incarcerated loved one over a long period should periodically reconfirm their provider's authorization status, particularly after any notification — from the app itself or from the facility — that the service is changing.

The verification steps described in this article take less time on a second or third pass than they do initially, because you already know which official facility page to visit and who to call. Building this as a habit protects against the common scenario where a contract change leads a family to assume their existing app still works, while a fraudulent service steps into the resulting confusion.

InMato LLC addresses this specifically through its jail booking alerts and release and transfer alert features. When a loved one's custody status changes, families receive a verified notification — which also signals the appropriate moment to reconfirm that their communication setup is still pointing to the current authorized provider. This kind of proactive family support through accurate, timely information is central to what InMato is designed to do.

12Supporting the Whole Family Through Accurate Information

Scam avoidance is one pillar of jail navigation, but it is embedded in a larger challenge: understanding a system that most families have never encountered before. The first 24 hours after a booking are often the most disorienting, and the pressure to act fast — to get money into the account, to make contact — is exactly what bad actors exploit.

Taking even 20 minutes to verify the facility, confirm the vendor, and review the payment interface before entering any financial information is time well spent. The methodical steps outlined here are not bureaucratic procedures — they are a practical framework for protecting both your money and your ability to stay connected to your loved one.

Information is the most powerful resource a family has in this moment. Knowing how to find someone in jail through official channels, knowing which commissary deposit route is verified, and understanding which app is actually authorized by the facility — these are the building blocks of effective, safe family support during one of the most difficult experiences a family can face.

For families who want verified guidance from the first search forward, InMato LLC is available in English and Spanish, and InMato Core is free with no time limit. The Family Support Library on the InMato platform includes 50 free guides covering the first 24 hours, the first week, communication setup, and life after release — so families are never navigating alone, and never need to wonder whether the service they are using is legitimate.

13About InMato LLC

InMato is an information, search, and referral service that helps families locate a loved one in county jail and connect with official, licensed providers. Founded by J.T. Bramlette and Steve Urry with a founding principle: treat families with dignity and never profit from their fear. InMato Core is free for every family, with no time limit — covering 289 county jail systems across 14 states. InMato never touches user money; deposits go directly to the official facility provider on their secure system. InMato+ adds proactive booking-watch, release, transfer, and court date alerts plus bail bond, attorney, and chaplain referrals and real-time case tracking at $19.99/month per loved one, cancel anytime. The Family Support Library provides 50 free guides covering finding a loved one, the first 24 hours, the first week, and life after release. Available in English and Spanish. InMato LLC, a Delaware limited liability company, headquartered in Santa Barbara, California.

14Get Started with InMato LLC

Search for your loved one now at inmato.com — free for every family, with no time limit. Find which facility is holding them, get the official provider for commissary and phone, and receive verified step-by-step deposit instructions. No account required to search. Available in English and Spanish. Results in 48 hours or less.

Originally published at https://www.inmato.com/blog/verifying-legitimacy-facility-official-app

Written by InMato

15Related Articles

• [Sending Digital Messages to Incarcerated Loved Ones](https://www.inmato.com/blog/sending-digital-messages-to-incarcerated-loved-ones)
• [Finding a Probation Officer's Contact Number](https://www.inmato.com/blog/finding-probation-officer-contact-number)
• [Supporting a Loved One on a Mental Health Watch List in Jail](https://www.inmato.com/blog/supporting-loved-one-mental-health-watch-list-jail)