A link is text or an image that takes you to a different webpage when you click it, but the words you see are not always the same as where it actually goes
The visible text of a link — what you read on the page — can say anything. A link might display the words "click here for your tax refund" but actually send you to a phishing site designed to steal your login information. The real destination is hidden until you either click it or take a moment to check first.
Learning to see where a link really points before you click is one of the fastest ways to avoid malware, scams, and credential theft. You do not need special tools. Your browser shows you the actual web address if you know where to look.
Key Takeaways
- Hover your mouse over a link without clicking to see the real web address in the bottom left corner of your browser window.
- The visible link text can be misleading or completely false, so always check the actual destination address before clicking.
- A legitimate bank or government website will have an address that matches the organization's real domain name, like chase.com or irs.gov.
- If the address looks wrong, misspelled, or unfamiliar, do not click — instead, go directly to the organization's website by typing the address yourself.
- On a phone or tablet, long-press a link to see the destination address without opening it.
How to check a link on a computer
Move your mouse pointer over the link and pause without clicking. Look at the very bottom left corner of your browser window. A small box or bar will appear showing the actual web address — the URL — that the link points to. This is the real destination, not the text you see on the page.
For example, an email might show a link that says "Verify your Amazon account" but when you hover over it, the bottom of the screen reveals it actually points to "amaz0n-verify.ru" — a fake site designed to look like Amazon. That mismatch is a red flag.
If you cannot see the address bar at the bottom of your screen, your browser may be hiding it. Try hovering over the link again and waiting a moment, or check your browser settings to make sure the status bar is turned on.
How to check a link on a phone or tablet
Tap and hold your finger on the link for a second or two without lifting. A menu will pop up with options. Look for text that says "Copy link" or "Open link in new tab" — the menu itself usually shows the actual web address above those options, or you can copy the link and paste it into a text message or notes app to see where it goes.
On an iPhone, long-pressing a link shows a preview of the destination at the top of the menu. On Android, the address bar at the top of the browser often updates to show the real URL when you long-press, even before you open anything.
What a legitimate web address looks like
Real web addresses follow a pattern: the organization name, then a dot, then a top-level domain like .com, .org, .gov, or .edu. For example, chase.com is the real Chase Bank website, and irs.gov is the real Internal Revenue Service website.
Scammers create addresses that look similar but are slightly wrong. They might use "chace.com" (missing an 's'), "chase-find.com" (adding words), or "chase.com.ru" (adding a country code). These are not the real sites. If you are unsure, do not click the link — instead, open a new browser tab, type the organization's name into a search engine, and navigate to the official website yourself.
Government websites almost always end in .gov, and banks and major companies use their official brand name as the main part of the address. If the address contains numbers, extra hyphens, or words that do not match the organization, treat it as suspicious.
Why scammers hide the real destination
A link that says "Claim your prize" or "Update your payment method" is more likely to get clicked than one that says "Go to a fake login page." Scammers rely on you not checking where the link actually goes. They count on the visible text being more persuasive than your caution.
This technique is called phishing — sending you to a fake website that looks like a real one so you will enter your username, password, or credit card number. The fake site captures that information and the scammers use it to access your real accounts or steal your identity.
What to do if a link looks suspicious
If the destination address does not match what the link text promises, or if it looks misspelled or unfamiliar, do not click it. Close the email, message, or webpage instead.
If you think the link might be legitimate but you are not sure, go directly to the organization's website by typing the address yourself into your browser. For example, if you get an email claiming to be from your bank, do not click any links in the email. Instead, open a new browser tab, type your bank's name, find their official website, and log in from there. If there is a real problem with your account, you will see it when you log in directly.
If you accidentally clicked a suspicious link, do not panic. Close the page when ready. If you entered a password or credit card number, contact the real organization right away and change your password. Most banks and email providers have fraud departments that can help if your information was compromised.
Links in emails and text messages are higher risk
Links in emails and text messages are more dangerous than links on websites you trust, because anyone can send you an email or text claiming to be from your bank, your employer, or a government agency. The link might look official, but the sender could be a scammer.
Before clicking any link in an email or text, hover over it or long-press it to see the real destination. If it does not match the organization's real website, it is a scam. When in doubt, ignore the link entirely and contact the organization directly using a phone number or website you know is real.
Frequently Asked Questions
Can a link be safe even if the address looks weird?
Rarely. Legitimate organizations use straightforward web addresses that match their brand name. If the address looks odd, misspelled, or unfamiliar, it is almost certainly not a real site. Trust your instinct — if something feels off, do not click.
What if I see a link that says it goes to one place but the address bar shows something different after I click?
That is a redirect — the first link sends you to a second address. This is sometimes legitimate (a shortened link that expands to the real address), but it can also be a scam technique. If you land on a page asking for your password or payment information, and the address does not match the organization you expected, close the page and do not enter anything.
Is it safe to click a link if it comes from someone I know?
Not always. Scammers sometimes hack email accounts or social media profiles and send malicious links to all the contacts. If a friend sends you a link that seems out of character or suspicious, check the address before clicking. You can also message them separately to ask if they really sent it.
Do I need special software to see where a link goes?
No. Your browser's built-in status bar (the address preview at the bottom) is all you need. You do not need to read anything or install extensions to check links safely.
What should I do if I clicked a link and now my computer is acting strange?
Close your browser when ready and restart your computer. If you entered any passwords or payment information on the page, change those passwords from a different device and contact the organizations involved. Consider running a malware scan using your computer's built-in security tools or a reputable antivirus program.