Free Tool
PHISHING LINK CHECKER
Got a suspicious link in an SMS, email, or chat? Check it here before clicking · Instant risk analysis · The link is analysed, never visited
How to Use the Phishing Link Checker
- Copy the suspicious link without opening it — press and hold the link on a phone, or right-click on a computer, and choose "Copy link address".
- Paste it into the box above and hit Analyse. The verdict appears instantly.
- Read the findings — each one explains in plain language what was detected and why it matters, so you learn the tricks as you go.
- Look at the highlighted "actual website" in the breakdown. Phishing lives and dies on people misreading this part.
- For a second opinion, run the optional Deep Check or open the link's report on Google Safe Browsing or VirusTotal — without ever visiting the link yourself.
About This Tool
Phishing is the most common cyber attack in the world for a simple reason: it works. A message arrives claiming your package is stuck, your bank account is blocked, or your electricity bill is unpaid, and a link promises to fix it. The link leads to a page dressed up as a familiar brand, and everything typed there — passwords, card numbers, one-time codes — goes straight to a criminal.
The good news is that phishing links usually give themselves away in the URL itself, before any page loads. Attackers can copy a website's look perfectly, but they cannot own its real address — so they resort to tricks: putting "paypal" in a subdomain of a domain they control, registering misspellings like arnazon or paypa1, using lookalike characters from other alphabets, hiding the real destination behind an @ symbol, or burying it under layers of redirects. This tool checks a pasted link against more than a dozen of these known tricks and scores the risk, explaining every red flag it finds.
The instant analysis happens entirely in your browser — the link is parsed as text and is never opened, visited, or transmitted anywhere, so checking a dangerous link here is completely safe. One honest limitation to understand: a high score means treat the link as dangerous, but a clean score means "no obvious red flags", not "guaranteed safe" — some phishing uses freshly registered, innocent-looking domains that only reputation databases catch. That is exactly what the optional Deep Check and the external Safe Browsing and VirusTotal buttons are for.
Frequently Asked Questions
Is it safe to paste a dangerous link here?
Yes, completely. Pasting text is harmless — danger only comes from opening a link. The instant analysis treats the URL as a piece of text and inspects its structure in your browser; the link is never loaded, visited, or contacted in any way.
The checker says low risk — does that mean the link is safe?
Not guaranteed. Low risk means the URL shows none of the common phishing tricks, which is a good sign but not proof — attackers sometimes use clean-looking, newly registered domains. For anything involving money or passwords, run the Deep Check or the external scanners too, and when in doubt, go to the website directly by typing its address instead of using the link.
What is the most important thing to look at in a link?
The registered domain — the part this tool highlights in the breakdown. In paypal.com.secure-verify.xyz, the real website is secure-verify.xyz, not PayPal; everything before it is decoration the attacker controls. Train your eye to find the true domain just before the first single slash, and most phishing stops working on you.
What does the Deep Check do differently?
The instant analysis never transmits the link. The optional Deep Check sends the URL — and nothing else — to our checker service, which asks Google's Safe Browsing database whether the link has been reported, follows any redirect chain to reveal the true destination (useful for shortened links), and looks up how recently the domain was registered. Very new domains are a strong warning sign, since phishing campaigns burn through fresh domains quickly.
I already clicked a suspicious link — what should I do?
Clicking alone is usually not fatal — the danger is what happens on the page. If you entered a password, change it immediately on the real website and anywhere else you use it, and turn on two-factor authentication. If you entered card details, contact your bank and block the card. If you downloaded a file, do not open it and run an antivirus scan. Acting within the first hour makes a real difference.