How to Spot a Malicious Short Link Before You Click

Published 19 September 2026 · Updated 19 September 2026

A short link hides where it leads. That is convenient for sharing and convenient for scammers, who use short links in fake delivery notices, prize messages and "account locked" warnings. You cannot judge a short link by looking at it, so the safest habits are about context and verification.

Warning signs in the message

Urgency or threats: "Your account will be closed in 24 hours", "final notice".
Unexpected messages from a company you have not dealt with, or about a parcel you are not expecting.
Requests for passwords, card numbers or verification codes. Legitimate organisations do not ask for these through a link in a text message.
Too good to be true: unexpected prizes, refunds or job offers.
Odd wording or a sender you cannot verify.

Check the destination first

Before opening a short link, look at where it really goes:

Use a preview page. On this site, add /p/ in place of /s/ in a short link (for example tinyurls.online/p/k3Fq8x) to see the destination website before continuing. Many other shorteners offer a similar preview.
Read the domain carefully. The important part of an address is the domain just before the first single slash. paypal.com.security-check.example belongs to example, not to PayPal.
Watch for lookalikes. Swapped letters, extra hyphens or unusual endings are common tricks.
Go to the source yourself. If a message claims to be from your bank or a courier, open their website or app by typing the address, and check there.

If you already clicked

Do not enter any information on the page that opened. Close it.
If you typed a password, change it immediately on the real site, and anywhere else you used it.
If you entered card details, contact your bank and ask about blocking the card.
Run a security scan on the device if you downloaded a file or installed something.
Turn on two-step verification for important accounts.

How we help

We do not accept links to other shorteners, we can screen destinations with Google Safe Browsing (when that option is switched on), and we review every report. If you find a short link on this site that leads somewhere harmful, please report it and include the full short URL. We will disable the link once we confirm the problem.