Fake link checker: how to spot the tricks in an address
See how a fake link hides where it goes, which tricks an address check can spot, and which it cannot.
Fake links work because people read the start of an address and stop. The part that decides where you go is near the end of the host, and anything before an @ sign is thrown away by the browser. This checker reads the whole address, marks each trick it knows and adds up the warning points.
In the example, https://example.com@login-verify.xyz/account, the address begins with a name that looks harmless and then uses an @ sign. The browser ignores everything before it, so the link really belongs to login-verify.xyz. That one trick adds 60 points, and the rating comes out High.
The checker is free, needs no sign-in and runs in your browser.
Paste your own link in the box above and every figure on this page changes to match it.
Common questions
Which tricks make a fake link look right?
Common ones are a famous name inside someone else’s address, an @ sign that hides the real destination, letters from another alphabet that look like normal ones, and a long chain of sub-names. The part that counts is near the end of the host.
Can the checker spot every fake link?
No. A copy with a clean-looking address, or a misspelling the checker does not know, can score Low. It reads the text of the address and nothing else, so it works as a first look, not as a judge.
A friend sent me this link. Does that make it fine?
Not by itself. If your friend’s chat account was taken over, the message still looks like it came from them. Ask them by another route, such as a call, whether they sent it.
Can a link be dangerous when the checker rates it Low?
Yes. Low means the address itself earned few warning points. The checker cannot see who runs the site, how old it is or what the page does, so a low rating is never a green light.
Does the link I paste leave my phone?
No. The checker is code that runs in your browser and works only on the text you paste. Nothing is uploaded, looked up or stored, which is also why it cannot see who owns a site or what a page does.