A shortened link looks like short.example/Xk3p9. It is handy for sharing, and it is just as handy for scammers, because you cannot tell where it goes by looking.
Why scammers love short links
- They hide a suspicious domain behind a clean-looking one.
- They get past quick visual checks. A long, odd address might make you pause, a short one does not.
- They fit neatly into texts and social posts.
- They can be created in seconds and thrown away.
What happens when you tap
A short link is a redirect. Your phone asks the short-link service where to go, and the service replies with the real address. Sometimes there are two or three redirects in a row. The final page is the one that matters, and you only learn about it after you have already landed.
How to check one safely
- Do not tap first. Long-press the link or copy it.
- Expand it. Use a tool that follows redirects without opening the page for you. LinkGuard shows the final destination and flags redirect chains.
- Read the real domain. Look at the part just before the first single slash. That is who owns the page.
- Check the verdict. A scanner can compare the destination against threat databases.
Signs a short link is risky
- It arrives unexpectedly, especially in a text or a direct message.
- It is attached to urgency such as a prize, a fine, a delivery or a locked account.
- It is one of several hops, ending on a domain you have never seen.
- The final page asks for a password, card number or one-time code.
When short links are fine
Plenty of legitimate companies use short links in marketing emails and social posts. The point is not that short links are always bad. It is that you cannot tell from the link, so check before you trust it.
Unmask it with LinkGuard
Paste a short link into LinkGuard and you will see where it ends up, along with a risk score and the reasons behind it.