How to Check Where a Shortened Link Really Goes
Short links such as those used in text messages, social media posts, and QR codes look neat and are easy to type. The downside is that the destination is hidden. You cannot tell whether a short address leads to a harmless article or to a fake login page. Fortunately, there are several ways to look before you leap.
Why short links exist
Long web addresses can be awkward in messages with limits on length, in printed material, and in spoken instructions. A short link redirects the visitor to the full address. This is perfectly legitimate and widely used by businesses, schools, and individuals. The risk appears only when you do not know who made the link.
Method 1: Use a preview feature
Many link services offer a way to see the destination without visiting it. Often this means adding a particular character or word to the end of the address, or opening a preview page. Check the help pages of the service that created the link. If a service does not provide any preview, consider that when deciding how much to trust links from it.
Method 2: Use a link expander
Several free websites let you paste a short address and show you where it redirects, including every step along the way if there are several redirects. Never type passwords into these tools. They are only for reading the final address.
Method 3: Hover or long-press
On a computer, hovering over a link shows its address at the bottom of the browser. On a phone, pressing and holding the link shows a preview menu with the address. For short links this shows only the short version, but it still helps you notice if the display text and the real address are different.
Method 4: Scan the final address with a reputation tool
After you find the destination, you can check it with an online URL scanning service. These services compare the address with known lists of harmful sites. A clean result does not guarantee safety, but a warning is a strong reason to stay away.
What to look for in the final address
- Does the domain match the organisation the message claims to be from?
- Are there extra words, hyphens, or unusual endings in the domain?
- Does it use HTTPS, and does the page look consistent with the real company?
- Does it immediately ask for passwords, card numbers, or codes?
QR codes are short links too
A QR code simply hides a web address. Before scanning one in a public place, check that it has not been stuck over another code. After scanning, read the address that your phone shows before opening it. Treat it with the same care as any short link.
If you create short links
If you share short links with your audience, help them trust you. Tell people what each link leads to, use clear titles, and avoid creating many redirects. A transparent link builds trust, while a mysterious one makes careful people hesitate.
When in doubt, skip it
If a message from an unknown sender includes a short link and urges you to act fast, the safest choice is not to click. Go to the official website by typing the address yourself, or contact the sender through a known number or account. Taking a minute to verify is always better than recovering a hacked account.
