How to check a link safely
- Copy, do not clickRight-click the link and choose Copy link address. On a phone, press and hold the link.
- Paste and checkPaste it above and press Check link. Shortened links work too.
- Read the verdict and the final URLThe Details section shows where the link really ends up after redirects.
7 signs a link is a scam
- The domain is misspelled:
paypa1.com,micros0ft-support.net. - The brand name is in the wrong place:
netflix.account-verify.combelongs toaccount-verify.com. - The message is urgent: "your account will be closed today".
- It asks you to log in or "confirm" card details.
- It came from an unknown sender, or a known contact writing unusually.
- It is a shortened link in a message you did not expect.
- The page asks you to download an "update" or "document viewer".
What the URL Scanner detects
| Threat | What it does |
|---|---|
| Phishing | Fake login or payment pages that steal passwords and card numbers |
| Malware download | Links that download viruses, trojans or ransomware |
| Unwanted software | Sites pushing adware, fake cleaners or browser hijackers |
| Scam sites | Fake shops, tech-support scams and fraudulent investment pages |
Want to check a file hash or an IP address too? Use the Threat Scanner. Got the link by email? Check the sender with the Email Header Analyzer.
Frequently asked questions
How do I check if a link is safe?
Copy the link without opening it - right-click and choose "Copy link", or long-press on a phone. Paste it into the URL Scanner and click Check link. You get a verdict from VirusTotal, Google Safe Browsing and URLhaus in a few seconds.
Does the scanner open the website?
Not on your device. The address is sent to the threat-intelligence services, which check their databases and, for VirusTotal, may visit the page from their own servers.
Can I check a shortened link like bit.ly?
Yes. Paste the short link as it is. VirusTotal follows redirects and shows the final address in the Details section, so you can see where the link really goes.
What is phishing?
Phishing is a fake page that copies a real brand - a bank, a delivery company, Microsoft or Netflix - to steal your password or card details. Most phishing links arrive by email, SMS or social media messages.
The link is clean but still looks wrong. What should I do?
Trust your instinct. New phishing pages can go unreported for hours. Check the domain spelling letter by letter, and go to the company's site by typing its address yourself instead of clicking.