Checking Links Safely

Why Links Can Be Dangerous

Links are the primary way attackers direct victims to malicious websites. A single click can lead to a phishing page, trigger a malware download, or expose your personal information.

Hover Before You Click

On a computer, hover your mouse over any link without clicking. Look at the bottom left corner of your browser or the tooltip that appears. This shows the actual destination.

• Does the URL match what you expect?
• Does it go to a domain you recognize?
• Are there suspicious misspellings or extra words?

Be Wary of Shortened Links

Services like bit.ly, tinyurl.com, and t.co hide the real destination. Attackers use these to disguise malicious links.

• Use a link expander tool to reveal the full URL before clicking
• If someone you trust sends a shortened link, ask them what it leads to
• Business communications rarely use URL shorteners

Links in Emails Require Extra Caution

Email is the most common delivery method for malicious links. Even if an email looks like it comes from someone you know:

• The sender address can be spoofed
• Accounts can be compromised
• Attachments and links can be swapped by attackers

When an email asks you to click a link to verify your account or update payment info, go directly to the website instead.

Links in Text Messages and Social Media

Attackers increasingly use SMS (smishing) and social media messages. The same rules apply:

• Do not click links from unknown numbers
• Be suspicious of "urgent" messages about packages, prizes, or account problems
• Verify with the sender through a different channel if something seems off

Safe Link Checking Tools

Before clicking a suspicious link, you can check it using free tools:

• VirusTotal: Scans URLs against multiple security databases
• urlscan.io: Shows a screenshot and analysis of the destination
• Google Safe Browsing: Reports known dangerous sites

Quick Checklist

• Hover to preview the destination
• Check for HTTPS and correct spelling
• Be extra cautious with shortened links
• When in doubt, navigate directly to the site
• Use link checking tools for suspicious URLs