before you tap it
Real or fake?
Paste a link from SMS, WhatsApp or email. I’ll check where it really goes and tell you if it looks like a scam, with the reasons.
Try:
Checks the link’s real domain, lookalike brand names, redirects, how old the domain is and, where available, Google Safe Browsing. No checker can promise a link is safe, so treat “looks real” as a good sign, not a guarantee. Links you check aren’t stored.
Spot it yourself
Read the real domain
Look at the part just before the first single slash. In sbi.verify-kyc.xyz/login the real site is verify-kyc.xyz, not SBI.
The padlock isn’t proof
HTTPS only means the connection is encrypted. Scam sites get padlocks for free.
Banks never ask by SMS
No bank, UPI app or courier asks for your OTP, PIN or KYC update through a link.
Short links hide things
bit.ly and friends hide the destination. This checker follows them for you.
Want to practise? Play Spot the fake link in the Lab.