Online PrivacyWhat the checker does
It reads the address the way a browser does and shows you the one part that says whose site it is: the domain. Then it looks for the tricks that phishing links use to hide that part:
- a trusted name used as a label in front of someone else's domain (
mybank.secure-login.co); - an @ sign, where everything before it is ignored (
www.mybank.com@verify-account.top); - a bare number in place of a name;
- look-alike letters from other scripts (shown as
xn--); - http in place of https;
- a shortened link that hides the destination;
- bait words in the name, such as kyc, verify, reward, login, refund;
- endings that are cheap to register and popular with fraud pages;
- links that lead to an app file (.apk) or a program instead of a page.
A good sign is noted too: a domain ending in .gov.in or .nic.in belongs to an Indian government body.
What it does not do
The checker never opens the link and contacts no server. That keeps you safe and private, but it also means:
- It cannot tell whether the page behind the link is harmful.
- It cannot follow a shortened link to its destination.
- It does not know whether the domain belongs to the organisation you have in mind.
mybank.examplemight be your bank or might not; only you can compare it with the address on your passbook, card or the bank's app. - "No warning signs" means only that the address has none of the usual tricks. A fraudster can register a clean-looking name.
So read the line "The site this link belongs to" and ask one question: *is that, letter for letter, the organisation I expect?* If you cannot say yes with confidence, do not open the link.
How to copy a link without opening it
- On a phone: press and hold the link in the message until a menu appears, then choose Copy link. Do not lift your finger quickly, or it opens.
- On a computer: right-click the link and choose Copy link address.
- For a QR code: most camera apps show the address as text before opening it. Read it there, or copy it.
Then paste it into the box above.
Reading the result
| Line | Meaning |
|---|---|
| The site this link belongs to | The domain. This alone decides whose page you would land on |
| Labels in front | Sub-parts chosen freely by the domain's owner. They prove nothing |
| Connection | https encrypts what you send; it says nothing about honesty |
| After the first slash | Folders and pages on that site. Names here prove nothing either |
Warnings come in three strengths. A strong warning means the address uses a trick with no innocent purpose, or leads to a file you should not install. A warning means a feature common in fraud links but also found in some genuine ones. Check marks something to look at twice.
The reasoning behind each check is explained, with more examples, in how to check a link.
The safer habit
For banking, payments, KYC, government services and anything asking for a password: do not use links from messages at all. Open the organisation's app, use your own bookmark, or type the address. A link checker is for curiosity and for teaching; your own typed address needs no checking.
To report a suspicious link, the government's Chakshu service on the Sanchar Saathi portal accepts reports of suspected web links. See Sanchar Saathi.
Is it safe to paste a dangerous link here?
Yes. Pasting text is harmless, and this page does not open, load or send the link. It only reads the characters.
The checker found nothing wrong. Can I open the link?
Only if the domain shown is, letter for letter, the organisation you expect. The checker cannot know that for you.
Why are shortened links flagged?
They hide the real destination, so nobody can judge them from the address. Genuine companies do use them in texts, which is one more reason not to rely on links in messages.