Check Links and Website Addresses

Pause before clicking. Learn how scammers use realistic links to steal passwords, money, and personal details.

How a website address actually works

Think of a website address (URL) like a postal address for the internet. Scammers love to hide their identity by putting famous brand names at the start, hoping you do not notice the real owner at the end.

1. The Prefix https://www.
Standard internet communication rules.
→
2. The Real Domain paypal.com
The most important part! The true name right before the first single forward slash.
→
3. The Folder Path /signin or /login
The specific room or page inside that website.
The Golden Rule: Read website addresses from right to left! Find the first single forward slash (/). The real website name is the two words immediately sitting to the left of that slash (like google.com, amazon.co.uk, or roblox.com).

Spotting real vs fake addresses

A padlock icon and official logos do not prove a website is genuine. Scammers can easily get free padlock certificates. Always inspect the exact text:

GENUINE: https://www.paypal.com/signin
Real owner: paypal.com. Directly before the single slash sits paypal.com.
FAKE (Subdomain Trap): https://paypal.com.secure-check.example/signin
Real owner: secure-check.example. The scammer added "paypal.com" as a fake room name at the front.
FAKE (Lookalike Letter Trap): https://www.paypaI.com/signin
Real owner: paypaI (uses a capital letter "I" instead of a lowercase "l").

Scammer tricks you must know

Trick 1: Urgent Messages

"Your parcel is held! Click now or pay £50!" or "Your account will be deleted in 10 minutes!"

Scammers intentionally create panic so you click quickly without checking the destination address.

Trick 2: Hidden Hyperlinks

The text on the screen might say "Click here to visit Apple.com", but the actual hidden link underneath sends you to a scam website.

Never judge a link by the blue text you see. Always preview where it actually leads before opening.

Choose your device route

Select your device below to see the exact steps for previewing a link safely before opening it:

1. Android 2. Apple iPhone 3. Windows PC 4. Mac
1. ANDROID ROUTE

How to Preview Links on Android Phones

Whether you receive a link in WhatsApp, an SMS text message, Gmail, or Google Chrome, follow these exact steps:

Never tap quickly → Press and hold finger on link → Read popup card → Tap empty space to cancel
  1. Never quick-tap the link: If an unexpected text message or email contains a link, resist the urge to tap it immediately.
  2. Press and hold your finger firmly on the link: Place your finger on the blue text or button and hold it still for 2 full seconds.
  3. Read the destination preview card: A white or dark menu will pop up on your screen. Look at the very top of that card: Android will display the real web address destination.
  4. Inspect the real domain: Check the letters right before the first forward slash. Does it say evri-parcel-redelivery.com instead of evri.com? If so, it is an outright scam!
  5. Dismiss safely: Tap anywhere on the blank grey background outside the pop-up menu to close it without opening the page.
  6. Use the official app instead: If the message claimed to be from your bank, school portal, or delivery service, open their official app directly from your phone home screen instead of using their link.
✓ Safe Result: You inspected where the link really leads without risking a single tap.
2. APPLE IPHONE / IPAD ROUTE

How to Preview Links on iPhone & iPad

Apple iOS includes a built-in preview inspection tool inside Apple Mail, Messages, and Safari:

Press and hold link → Haptic buzz → Read top website preview address → Tap outside window to cancel
  1. Do not tap the message: Even if the sender name says "Royal Mail" or "Netflix", scammers can spoof contact names.
  2. Press and hold the link: Rest your finger on the link until you feel a gentle vibration (haptic click).
  3. Inspect the preview bubble: A preview window will float above your message. Look right at the top bar of that bubble to see the exact website address.
  4. Check for spelling tricks: Look for odd dashes, numbers replacing letters (like paypa1.com), or weird endings like .xyz, .top, or .ru.
  5. Close the window: Tap anywhere in the empty space outside the preview card to dismiss it safely. Do not tap "Open Link"!
  6. Verify independently: Open Safari, type the real web address yourself from memory, or use your saved bookmark.
✓ Safe Result: You saw the actual webpage without loading cookies, trackers, or malicious forms.
3. WINDOWS PC ROUTE

How to Check Links on Windows PC

Using a mouse on a desktop computer gives you the easiest way to inspect links before clicking:

Hover cursor over link → Look at bottom-left corner of screen → Read URL → Never click if suspicious
  1. Move your mouse over the link: Hover your mouse cursor directly over the link or button, but do not click your mouse button!
  2. Look at the bottom-left corner of your screen: Watch the very bottom-left corner of your browser window (Chrome, Edge, or Firefox). A small grey box will appear revealing the true destination URL.
  3. Compare the two addresses: Compare what the link says on the webpage with the URL shown in that bottom-left corner. If the text says microsoft.com, but the bottom-left corner says update-win11-fix.com, it is dangerous!
  4. Right-click to copy safely (Optional): If you want to examine a long link without opening it, right-click the link, select Copy link address, open Notepad, and paste it to inspect the words comfortably.
  5. Navigate manually: If an email says your account needs attention, close the email, open a new browser tab, and type the company web address yourself.
✓ Safe Result: Your computer never connects to the scam page because you checked before clicking.
4. MAC (MACOS) ROUTE

How to Check Links on a Mac

Use Safari or Apple Mail on macOS to reveal hidden website targets:

Safari / Mail → Hover pointer over link → View status bar address → Type address manually
  1. Turn on the Safari Status Bar: In Safari on your Mac, click View in the top Apple menu bar, then click Show Status Bar. You only need to do this once.
  2. Hover your pointer over the link: Rest your mouse or trackpad pointer over the link without clicking.
  3. Read the status bar at the bottom: Look at the bottom-left of the Safari window to read the real web address destination.
  4. Inspect the domain ending: Make sure the domain name ends with the genuine brand and a legitimate extension (such as .co.uk or .com).
  5. Never type credentials after following email links: If you accidentally clicked a link, close the tab immediately. Never type your username or password on a page opened from an unsolicited message.
✓ Safe Result: You maintain total control over what pages your Mac loads.
The 3-Second Golden Rule: Stop. Do not click or reply. Scammers rely on rushed decisions. If any message threatens you with a deadline, promises free money, or claims your delivery is stuck, open your official app or type the verified address yourself into your browser.

Essential safe link checklist

  • Always read the domain from right to left starting from the first forward slash.
  • Remember that padlock icons only mean the connection is encrypted, not that the site is honest.
  • Press and hold on mobile phones to preview addresses without opening them.
  • Hover your mouse on laptops and PCs to check the bottom-left corner destination.
  • Never type passwords or bank cards into pages opened through unexpected texts or emails.
  • When in doubt, close the message and open the official app directly.