How to Spot a Suspicious Link Before You Click It

Introduction

Phishing messages try to make you visit fake websites, download harmful files, or reveal credentials. Links can arrive by email, text, social media, or chat. Treat unexpected requests cautiously.

1. Check the real domain

Read the domain carefully. Scammers use misspellings, extra words, or lookalike domains. A familiar logo does not prove that a website is genuine.

2. Preview the destination

On a computer, hover over the link to preview its destination. On a phone, use a safe preview if available. If unsure, do not interact with it.

3. Be wary of urgency

Threats that an account will close, a parcel is held, or a payment is due immediately are common pressure tactics. Contact the company through its official app or a known website address.

4. Treat shortened links carefully

Shortened URLs hide the destination. Verify unexpected links through a separate trusted channel rather than entering credentials on a page that merely looks plausible.

5. Check attachments and QR codes

QR codes also open links. Avoid unexpected downloads and attachments, especially if they ask you to enable macros, install software, or sign in again.

6. Verify independently

For a bank, delivery company, employer, or government service, open the official app or type its known address yourself. Do not trust phone numbers supplied only in suspicious messages.

7. Keep protections updated

Update your browser and operating system and keep built-in security protections enabled. They help but cannot identify every new scam.

If you already clicked

Close a suspicious page and do not enter information or download files. If you entered a password, change it on the official site from a trusted device and enable two-step verification. If you supplied payment details, contact your bank promptly. Scan any downloaded file and report the message.

Conclusion

Pause, inspect the destination, and verify unexpected requests independently. When in doubt, do not click.