Free link checker
Is this link safe?
Paste a link from a text, email or DM. We check it for phishing, scams and malware, and show where it really goes before you open it.
Your browser never opens the link. Our scanner does, on our servers.
What the link checker looks at
No single sign proves a link is a scam. The checker weighs all of them into one risk score, the same way our content moderation API scores links that people post on apps and websites.
- Threat intel feeds
- We look the link up in threat intel feeds that list known phishing and malware sites.
- Brand impersonation
- Scam links put a bank or shop name in a domain the brand does not own, like paypal.secure-login.top.
- Domain age
- Most scam domains are registered days before the messages go out. A domain that is years old is a good sign.
- Redirects and short links
- We follow short links and redirects to the page they end on, so you see the real address before you open it.
- Look-alike characters
- Letters from other alphabets can make a fake domain look the same as a real one. We flag them.
- Security certificate
- We check that the site has a valid HTTPS certificate. A valid certificate alone does not make a site safe.
- Domain ending and wording
- Some domain endings are mostly used for spam, and words like “verify” or “unlock” are common in phishing links.
- Email setup
- Real businesses can receive email on their domain. A domain with no email setup is a small warning sign.
How to check if a link is safe yourself
A checker can miss a scam site that went online an hour ago. These five checks take a minute and catch most phishing links.
- 01
Read the domain from right to left
The real domain is the part just before the first single slash. In apple.com.id-check.net, the site is id-check.net, not apple.com.
- 02
Look for small spelling changes
Scammers swap letters (rn for m, 0 for o) or add words like “-support” or “-secure”. Compare it with the address you know.
- 03
See where a short link goes
A bit.ly or tinyurl link hides the real address. Paste it in the checker above to see where it ends up.
- 04
Ask why you got it
Pressure is the main sign of a scam: a parcel you did not order, a locked account, a prize, a fine that must be paid today.
- 05
Go to the site yourself
If a message says your bank or a shop needs something, do not tap the link. Open their app, or type the address you know.
Already clicked a suspicious link?
Opening it is usually not the problem. What you typed or downloaded after is. Find your case and act within the hour.
- Only opened it
- Close the page. You are most likely fine.
- Typed a password
- Change it from another device, and everywhere you reuse it.
- Gave card details
- Call the number on the back of your card.
- Downloaded a file
- Delete it, then run a malware scan.
Check every link your users post
Scammers post phishing links in chats, comments, reviews and profiles on your platform. The Moderation API checks every link in the content you send it, with the same signals as this page, and returns a risk score you can block or review on.
You can add your own allowlist and blocklist of domains, flag every short link, and send risky messages to a review queue. The same call also checks the text for spam, scams and abuse.
Frequently asked questions
About the free link checker and how to spot unsafe links.
How do I know if a link is safe?
Paste it in the checker at the top of this page. It looks the link up in threat intel feeds, checks the domain’s age, follows redirects and looks for brand impersonation. Then check the domain yourself: read it from right to left and make sure it is the site you expect.
Is the link checker free?
Yes. You do not need an account. To stop abuse, each person can run a limited number of checks per minute and per day.
Does the checker open the link?
Our servers load the link to follow redirects and read its certificate. Your browser does not open it, so nothing on the page can run on your device.
Can a link give my phone or computer a virus?
Opening a link rarely installs malware on an up-to-date phone or computer. The danger is what comes after: a fake sign-in page that takes your password, or a file or app that you are asked to download. If you clicked one, read what to do after clicking a phishing link.
Can it check bit.ly and other short links?
Yes. The checker follows the short link and shows you the address it ends on, then checks that address too.
Is a link safe if the checker finds no warning signs?
Not always. A new scam site can be online for hours before anyone reports it. Use the result together with your own judgement, and never type a password or card number on a page you reached from a message.
Do you store the links I check?
The link is sent to our URL scanner and may be kept to improve detection. We do not store it together with your IP address. Do not paste links that contain passwords or private tokens.
Can I check links in bulk or from my app?
Yes, with the Moderation API. It checks every link in the messages, posts and profiles your users submit, with the same signals as this page, and flags or blocks risky ones.
