How to Check a Shortened Link Safely Before You Click

Tap each term to learn how to check a shortened link before clicking.

Why shortened URLs can be risky

A URL shortener condenses a long web address into a short one, but that convenience also makes it hard to see the actual destination before clicking, a gap that can be exploited to hide a malicious site's address.

Use a URL expander tool to see the real address

A number of free online tools let you paste a shortened link and see exactly where it actually leads before you click through, so you can confirm the real destination in advance.

Hover over a link on desktop for a quick preview

On a computer, hovering your cursor over a link without clicking often shows the actual destination address in a tooltip or status bar, making it an easy habit to build before clicking anything.

Check the domain carefully after expanding it

Even after expanding a shortened link, the destination could be a fake domain designed to look similar to a legitimate one, so it's worth checking the exact spelling and ending (.com, .org, etc.) carefully.

Legitimate shortening services themselves aren't the problem

Well-known services like bit.ly and similar shorteners aren't inherently dangerous. The issue is that scammers sometimes use them to disguise a malicious link, so the tool itself isn't what to be wary of.

Be extra cautious with shortened links in texts or DMs

A shortened link arriving by text message or a social-media direct message from an unfamiliar number or account is a common phishing pattern, so it's safer not to click if you can't verify who sent it.

A convenient feature that can double as a risk

A shortened URL is genuinely useful for sharing a long address more easily, but that same "you can't tell what it hides" quality is exactly what makes it exploitable. Building the habit of checking a link before clicking is the simplest and most reliable precaution you can take.

It shows up constantly in phishing and scam texts

Both SMS phishing scams and phishing emails frequently use shortened URLs specifically to disguise the real destination, so it's worth learning the broader signs of those scam types alongside this habit.

Frequently Asked Questions

Can I preview a link before tapping it on my phone too?

Some messaging apps and mobile browsers support a long-press link preview, though it's often less convenient than on a computer. Copying the link into a separate URL-checking tool tends to be more reliable on mobile.

I already clicked a shortened link and ended up on a strange site, what now?

If you didn't enter any personal information or a password, simply closing the page is usually enough. If you did enter information, change that account's password right away, and run a security scan if you downloaded anything suspicious.