URL to check
URL breakdown
For a deeper scan, check on:
How to spot a scam link
Lookalike domains are the #1 trick
Scammers register domains like "paypa1.com", "arnazon.com", or "apple-support.net" that look almost identical to real ones. Always check the actual domain name, not just the display text of a link.
Short links can hide anything
bit.ly, t.co, and other short links completely hide the destination. Always expand a short link before clicking if it comes from an unknown source. Use a link expander or hover over the link first.
HTTPS doesn't mean safe
A padlock icon just means the connection is encrypted — not that the site is legitimate. Phishing sites use HTTPS too. It's a necessary baseline, but never a guarantee of safety.
When in doubt, go directly
If you get a link claiming to be from your bank, don't click it. Type the URL directly in your browser. Real companies never urgently ask you to click a link to "verify your account".