Suspicious Link Checker

How to copy a link without opening it

• iPhone: press and hold the link, then choose “Copy Link”. Don't tap “Open”.
• Android: press and hold the link or the message, then choose “Copy”.
• Computer: right-click the link and choose “Copy link address”.

What this checker looks for

A web address is read from right to left. The part just before the first single slash, like usps.com in tools.usps.com/track, is who really owns the site. Scammers hide a real brand name somewhere else in the address so it looks right at a glance. This tool flags:

• Brand names on the wrong domain, like usps.com-redelivery.top, which actually belongs to com-redelivery.top.
• Look-alike characters (letters from other alphabets that mimic English ones).
• Raw IP addresses instead of a name, and hidden destinations using an @ symbol.
• Link shorteners that hide where you'll end up.
• Unusual endings often seen in scam campaigns, like .top or .xyz, plus “verify”, “login” or “pay” wording.
• No encryption (http:// instead of https://).

A clean result doesn't mean “safe”

Scammers sometimes use real-looking domains or hacked websites. If a message pressures you to act fast, don't use the link at all. Type the company's address into your browser yourself, or use its official app. Our guides on what to do if your email is hacked and turning on two-factor authentication explain how to protect your accounts.