Free security tool
Check a link before you click
Paste a suspicious link, or the whole email or text it came in. We check every link against Google's threat list and look for the tricks scammers use.
What we check
Every link gets four checks
Google's threat list
Matched against Google Safe Browsing, the same list Chrome uses to block known phishing and malware.
Brand impersonation
Spots fake Microsoft, PayPal, bank and delivery links, including misspellings like "micros0ft" and lookalike characters.
Brand-new domains
Looks up when the website was registered. Scam sites are often only days old.
Address tricks
Catches hidden destinations: link shorteners, IP addresses, "@" tricks, script links and risky domain endings.
What the results mean
- Dangerous: Google has confirmed it as phishing or malware. Don't open it.
- Likely a scam: strong signs of impersonation or deception. Don't open it or sign in through it.
- Be careful: some warning signs. Only continue if you expected the link and trust the sender.
- No problems found: no known threats or warning signs, but still check who sent it. Scammers also use legitimate sites.
- Couldn't fully check: Google's list couldn't be reached. Treat the link as suspicious and try again shortly.
Already clicked a suspicious link?
- Change the password for that account (and anywhere you reuse it), from a device you trust.
- Sign out of all sessions and check your MFA / authenticator settings for anything you didn't add.
- If you entered card or bank details, call your bank now.
- If a file downloaded or ran, disconnect that device from the internet.