How to Tell if a Link Is Safe Before Clicking

🎣Free Phishing Link Checker
Spot fake login links before you click.Open tool →

Find the real domain

Look at the part just before the first single slash. The last two pieces are the real site: paypal.com.secure-login.xyz is secure-login.xyz, not PayPal. Anything before that is decoration a scammer chose.

Common tricks

Look-alike letters (rn instead of m, Cyrillic а in apple), brand names in the wrong place, an @ sign that hides the real address, link shorteners, bare IP addresses and unusual endings like .zip, .top or .xyz on 'bank' links.

Check without clicking

On a computer, hover over the link to see the address; on a phone, press and hold. Copy it into the Phishing Link Checker – it analyses the text only and never opens the link.

If you already clicked

Close the page and don't enter anything. If you typed a password, change it on the real site immediately, turn on two-factor authentication and watch your accounts.

Frequently asked questions

Does HTTPS mean a site is safe?

No – it only means the connection is encrypted. Phishing sites use HTTPS too.

Are shortened links dangerous?

They hide the destination, so treat unexpected ones with care.

What's the safest habit?

Go to important sites by typing the address yourself.