How to assess a link in a text, email, message or QR code before opening it or entering personal information.
Use the steps below to slow the situation down, separate the claim from the pressure around it and keep a clearer record of what you checked and what you decided to do next.
Look at why the link was sent
Unexpected account problems, prizes, refunds and urgent verification requests deserve extra scrutiny.
Do not trust familiar words inside a long address
A web address can include a brand name without belonging to that brand. Focus on the actual domain, not just recognisable words.
Avoid signing in through an unexpected link
Open the service through its saved app, bookmark or independently located website instead.
If you opened it but entered nothing
Close the page and avoid returning through the same link. If you downloaded something or granted permissions, review the device and account security steps relevant to what happened.
Practical checklist
Quick checklist
- Look at why the link was sent
- Do not trust familiar words inside a long address
- Avoid signing in through an unexpected link
- If you opened it but entered nothing