How do I know if an email link or website is fake or dangerous?
You'll be able to: Inspect website links before clicking to protect your accounts from phishing scams
- Risk
- Safe to try
- Windows
- Windows 11 · Windows 10
Filed under Safety & privacy
The steps
- 1
Place your mouse arrow over the blue link or button inside the email or message without clicking on it. A small grey preview box appears at the very bottom left corner of your browser or email window showing the real web address.
Hovering over a link to reveal the actual destination web address in the bottom corner.
Screenshot on the way. The steps above are complete without it.
Why does the preview address matter?
The text shown inside an email can be written as anything (such as "bank.com/login"), but hovering reveals the actual computer address where you will be sent. Scammers often disguise their malicious links behind trustworthy-looking text.
- 2
Look at the core domain name right before the first single slash
/in that preview address. You see the actual company name and top-level domain (for example:paypal.comvspaypal-support-security.com). - 3
If an email asks you to click a link urgently due to a "suspended account" or "unauthorized charge", do not click it. The email is asking you to take rushed action.
An example of a suspicious urgent email with fake link warning indicators.
Screenshot on the way. The steps above are complete without it.
- 4
Instead of clicking the link, open a new browser tab and type the official website address yourself (or use the official phone app). You sign in through the genuine company portal safely without risking your account.
It looks different on my screen
On a touch screen or phone, you can press and hold your finger on a link for 2 seconds without letting go. A preview popup will appear displaying the true web address so you can read it before opening.
Did this work?