How to Check a Link Sent on WhatsApp
Long-press to see the real address, read the domain carefully, question the preview, and use a scanner. A quick routine for checking any link someone sends you on WhatsApp.
Checking a link takes less than a minute, and it is one of the most useful habits you can have on WhatsApp. Here is a routine that works for any link, from anyone.
The routine
- Pause. Did you expect this link? Does the message create urgency?
- Press and hold the link to copy it, rather than tapping.
- Read the domain. Find the part just before the first single slash. In
hxxps://yourbank.account-check[.]net/login, the real site is account-check.net, not your bank. See how to read a URL. - Ignore the preview. Logos and titles in previews are chosen by the site.
- Check the sender. If it came from a friend, is it the kind of thing they would send? Ask them by phone.
- Scan it. Paste the link into a link scanner. See below.
- Go direct. For banks, deliveries and accounts, use the official app or type the address yourself.
Warning signs in the address
- Brand names in the wrong place, such as brand.verify-login.com.
- Misspellings and extra words: secure, verify, update, claim.
- Unusual endings, such as .top, .xyz or .info, for a well-known company.
- Link shorteners that hide the destination. See shortened links.
Paste the link or the whole message into CyberWatch AI Scan for a free second opinion. See using CyberWatch AI Scan with WhatsApp.
Related: checking a link without clicking and phishing links in WhatsApp. For more, see our guide to WhatsApp scams.
Frequently asked questions
How do I see a link without opening it?
Press and hold the link. On most phones you can copy it or see the full address without opening the page.
What part of the address matters most?
The domain just before the first single slash, such as example.com. Everything before it can be decoration.
Is a link from a friend safe?
Not automatically. Their account could be hacked, or they could be forwarding a scam in good faith.
Sources
- About suspicious messages and scams, WhatsApp Help Center
- Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
