How to check the safety of a suspicious link in a text message

People often receive more spam messages than important messages in a day, and opening just one bad link can cost you – phishing, stolen data, and even malware. So when a suspicious message pops up, it's best not to click on it blindly.

1. 6 things to do when receiving email to avoid getting viruses

4. Check sender information

The first thing to do when you receive a message with a suspicious link is to verify who sent it. If the message comes from an unknown number, a suspicious SMS short code, or an international code, that's a red flag.

When you spot an unfamiliar number, use caller ID apps like Truecaller to see if the number is associated with a scammer or a real business.

 

You also need to check that the message makes sense in context. If it claims to be from a service you use, the number should match what's listed on the official website - legitimate companies don't text from random numbers.

You should also apply a little common sense: You don't get interview invitations from companies you've never submitted a resume to, or survey reviews from delivery services you've never used. If you don't initiate contact, the chances are much higher that it's a scam.

 

3. Look for warning signs in the text and URL

Before you consider clicking a link in a text message from an unknown number, carefully examine the message and URL . The first thing to check is whether they are using urgency or pressure tactics. If you see phrases like 'Your account will be suspended in 24 hours' or 'Click now or you will lose this offer,' be immediately suspicious.

If a company really needs you to act urgently, they will contact you through official channels, not with a sketchy, isolated letter.

Grammar and spelling errors in the text are another big red flag, as legitimate companies rarely make them. Errors in the URL are an even bigger red flag. The most common error is a misspelling, such as 'paypl' instead of PayPal in a fake URL (e.g. 'paypl-support.info').

The URL may even look real unless you look closely and find sneaky letter swaps like 'paypa1.' Thankfully, most messaging apps let you tap and hold on a link to preview it without opening it—though you should be careful when interacting with a potentially dangerous link. Some even give you an automatic preview.

 

If you're on a laptop, simply hover over the link to check where it actually leads - no need to click.

2. Use a link scanning tool to check the status of your website

If you can't preview the link - or just want to be extra sure - copy and paste the link into a link scanner to get more accurate information about whether the link is safe or not.

The Google Safe Browsing search tool is often used because it is easy to use. Just paste the link into the Check site status box , press Enter and within seconds you will know if the link is considered unsafe or not.

 

Other reliable options include VirusTotal and URLVoid, which check whether security sources have identified the link as malicious.

But remember that a 'no unsafe content found' result doesn't mean the link is harmless; it just means the site hasn't been checked. So when in doubt, err on the side of caution.

1. Report scam before deleting message

If the message is confirmed to be a scam, don't ignore it. Reporting it will help prevent others from falling for it.

Most phones and messaging apps have Block and Report Spam options . Blocking will prevent the sender from texting you again, while reporting ensures your phone carrier will mark the number as a scam.

In addition to your carrier, you should report the scam to the company it's impersonating. Most banks, delivery services, and major brands have dedicated scam reporting pages. They'll ask you to forward a copy of the message or a screenshot so they can better combat the scam.

If you are feeling extra zealous, you can also report the scam to your local authorities or cybersecurity agencies. Many countries have official websites for reporting email scams.

Once you have completed your task, delete the message. Never respond, as engaging with scammers only makes you a bigger target, even if you think you are unlikely to fall victim to cybercrime. Remember, if something feels off, trust your instincts. Ignoring a message is always the safe option when you are unsure.