The moment before you click a link is the best time to protect yourself—and it only takes a few seconds to check where you’re really going. Whether it’s an email from your “bank,” a shortened link on social media, or an unexpected text message, a quick check can save you from malware, credential theft, and identity fraud.
This guide covers practical, easy-to-use techniques for checking links on any device—so you can click with confidence.
TL;DR
- Hover over links on desktop to reveal the true destination in your browser’s bottom-left corner.
- Long-press links on mobile to preview the URL without opening it.
- Use browser extensions that expand shortened URLs and show link previews before you click .
- Copy suspicious links into a link scanner to check them safely without visiting the page.
- Don’t trust the padlock icon alone—HTTPS means the connection is encrypted, not that the site is safe.
Key Takeaways
- Hovering or long-pressing reveals the actual destination before you commit to a click—this is your first and most important defense .
- Browser extensions can add extra layers of protection by showing previews, expanding short links, and even scanning for threats .
- Link scanning services let you paste a URL and get a safety verdict without ever visiting the site .
- Always check where a shortened link leads—services like Bit.ly hide the destination by design, which can be exploited by scammers .
- Trust your instincts—if a link feels off or comes from an unexpected source, take the extra time to verify it.
How to Check a Link on Desktop (Browser)
Desktop browsers make it simple to check links before you click. The key is knowing where to look.
The Hover Technique
On a computer, hover your mouse over a link without clicking it. In almost every browser, the true destination URL will appear in the bottom-left corner of the window. This is the most reliable way to see where you’re going .
What to look for when you hover:
- Does the destination match the link text? If a link says “paypal.com” but the hover preview shows something else, it’s suspicious.
- Is the domain correct? Watch for subtle misspellings like “paypa1.com” or excessive subdomains.
- Are there unexpected redirects? If you see multiple URLs in the chain, be cautious.
Use Browser Extensions for Extra Protection
Extensions can make link checking even easier. Here are some options:
Clear Links displays a customizable tooltip when you hover over a link, showing the destination and automatically expanding shortened URLs from services like Bit.ly. It’s designed specifically for phishing awareness .
Smart Link Expander lets you right-click any shortened link to expand it or copy the full URL before opening. It can also warn you if a link is potentially harmful .
URL Security Scanner offers a “Link X-Ray” feature—right-click any link and select “Scan Target” to see the final destination, redirect chains, and a risk score. It performs its analysis locally for privacy .
Unsitely automatically scans links on any page and displays a safety chip next to each one—green for safe, yellow for suspicious, red for dangerous. It also checks SSL certificates, domain age, and phishing patterns .
How to Check a Link on Mobile
Checking links on a phone or tablet requires a slightly different approach since there’s no mouse to hover.
The Long-Press Technique
On most mobile browsers, press and hold a link (don’t tap it). A menu will appear showing the full URL. This lets you see where the link leads without actually opening it .
Be careful not to tap quickly—that will open the link. Press firmly and hold until the menu appears .
Copy and Check
If you’re unsure about a link in a message or social media app:
- Long-press the link and select Copy Link Address or Copy URL.
- Paste it into a notes app or a link checking tool to inspect it.
- If it looks suspicious, don’t open it.
Some security apps like IPVanish Link Checker let you share a link directly from any app to be scanned, so you don’t even need to copy and paste.
How to Check a Shortened URL
Shortened links like those from Bit.ly, TinyURL, or t.co are convenient—but they hide the destination by design. Scammers love them.
Here’s how to check them safely:
- Use a browser extension like Smart Link Expander or Clear Links that expands shortened URLs before you open them .
- Copy the short link into a scanner—many link checking tools will show you the final destination without making you visit it .
- Look for preview options—some shortener services (like Bit.ly) offer a link preview feature.
Use Link Scanning Services
If you’re still unsure after hovering or copying, use a dedicated link scanning service. These let you check a URL without actually visiting it.
IPVanish Link Checker scans a URL for malicious content, follows redirect chains, and provides a threat assessment with a screenshot preview—all without exposing your device. Available on Windows, Mac, Android, and iOS, it’s free for everyone .
urlscan.io is a free online service that analyzes URLs for potential security threats. It’s often used by security professionals and can be integrated with tools like Microsoft Security Copilot for advanced scanning .
To use a link checker:
- Copy the suspicious URL (don’t open it).
- Paste it into the link checker’s input box.
- Review the safety verdict and details.
These services run the scan in a secure environment, so the link never touches your device.
What to Look for in a Link
Even without tools, you can spot many suspicious links by eye:
| Red Flag | Why It’s Suspicious | Example |
|---|---|---|
| Misspelled domain | Typosquatting to mimic a trusted brand | micros0ft.com instead of microsoft.com |
| Excessive subdomains | Attempt to look legitimate while using a different domain | secure-login-bank-example.com |
| Raw IP address | Phishing sites frequently use IPs instead of domains | http://192.0.2.1/login |
| Unusual TLDs | Attackers often use cheap top-level domains | .top, .xyz, .cc |
| Shortened link | Hides the true destination | bit.ly/3xK7zY9 |
Also be suspicious of links that create urgency (“Your account will be locked”), request personal information, or come from unexpected sources.
Remember: The Padlock Doesn’t Mean Safe
One of the most dangerous misconceptions is that the padlock icon and HTTPS mean a link is safe. They don’t. HTTPS only means the connection between you and the site is encrypted. It doesn’t verify that the site itself is legitimate.
Attackers can get SSL certificates easily and use them on phishing pages. Around 80% of phishing sites now use HTTPS specifically because people were taught to look for the padlock. Always check the destination, not just the padlock.
Frequently Asked Questions
How can I check a link without clicking it on my phone?
Long-press the link until a menu appears. You’ll see the full URL without opening it. Be careful not to tap quickly—that will open the link .
Can I expand a shortened URL before clicking it?
Yes. Use a browser extension like Smart Link Expander or Clear Links that automatically shows the full destination when you hover or right-click. Some tools also let you paste the short link into a scanner to see where it leads .
Are browser extensions safe to use for link checking?
Most are, but choose reputable ones. Look for extensions that emphasize privacy and don’t collect your browsing data. Many link checkers perform analysis locally to protect your privacy .
What’s the best way to check a link in an email?
Hover over it first to see the destination. If you’re unsure, don’t click—copy the link and paste it into a link scanner. Better yet, go directly to the company’s website by typing the address yourself rather than following links in unexpected emails.
Sources
- Clear Links – GitHub Repository
- Smart Link Expander – Firefox Add-ons
- URL Security Scanner – Firefox Add-ons
- Unsitely – Firefox Add-ons
- IPVanish Link Checker Support Article
- Microsoft Learn – UrlScan and Security Copilot
Checking a link before clicking takes just seconds but can save you from serious consequences. Make it a habit: hover or long-press every link that gives you pause. Use tools that show you where you’re really going. And never trust a link based on appearance alone—especially when it comes from an unexpected message.
Have a link-checking question we didn’t cover? Drop it in the comments—we’re here to help you stay safe online.
