Warning signs in a link
- A close-but-not-exact spelling of a brand or website name.
- Extra words, unusual subdomains, shortened links, or a destination that does not match the message.
- A link delivered with an urgent request to sign in, pay, or verify a code.
- A message that makes sense only if you click immediately.
Check without clicking
- Do not open the URL from the message while you are uncertain.
- Look at the full address, if your device shows it, and compare it with the official domain you know.
- Open the organization’s official app or type its known website address yourself.
- Use an independent contact method to confirm a supposed alert or request.
Fictional example“Bank security: verify now at secure-examplebank-login.com.” The name may resemble a real bank, but an unexpected login demand and an unfamiliar domain are reasons to use the bank’s official app instead.
If you already opened the link
Closing a page may be enough if you did not enter information or download anything. If you entered a password, change it from the real service’s website and review account activity. If you entered payment information, contact your bank or card provider right away.
How the app approaches links
Is This a Scam? is available on the App Store and Google Play. It analyzes the link, its context, and suspicious signals in content you choose to share. It is not a live website security scan, does not visit the site for you, and is not a replacement for independent security checks.
Check Before You Trust. No automated assessment can guarantee that a link is safe or malicious.