How to tell if a link is safe before you tap it

A single tap on a bad link can lead to a fake login page, a malicious download or a payment you never meant to make. Criminals send these links by text, email, chat and social media, often pretending to be a bank, a delivery company or a prize promoter. The good news is that you can often spot trouble in seconds.

Pause and ask three questions

1. Was I expecting this message? Unexpected messages deserve extra suspicion.
2. Does it rush me? Words like "urgent", "last chance" or "account will be closed" are pressure tactics.
3. Does it ask for secrets? Real services never ask for your PIN, password or OTP.

Look closely at the web address

The part of the address that matters most is the main domain, which appears just before the first single slash. For example, in a link that begins with a bank's real name followed by a different word and then extra characters, the true owner of the site may be someone else entirely. Watch out for:

• Misspellings, such as an extra letter or a number replacing a letter.
• Long addresses with the brand name buried inside a longer, odd-looking domain.
• Unusual endings that do not match the company's usual website.
• Shortened links that hide where they lead.

Preview before you open

On a computer, hover over a link to see where it really goes. On a phone, press and hold the link to preview the address. If you cannot tell, do not open it.

Go to the source instead

Instead of tapping a link in a message, open the official app or type the company's website yourself. If there is a real problem with your account, you will see it after you log in normally.

Be careful with attachments and downloads

Do not install apps or open files from links in messages. Only install apps from official app stores, and even then check the publisher's name and reviews.

Check the padlock, but do not trust it alone

A padlock icon means the connection is encrypted, not that the site is honest. Criminals can get padlocks too.

What to do if you clicked

Do not enter any details. Close the page. If you already typed a password, change it at once from the official site and turn on two-step verification. If you shared banking details, call your bank right away using the number on your card.

Teach others

Share these checks with parents, friends and younger relatives. Scammers rely on people feeling rushed and alone, so a calm second opinion is powerful.

Written by the EarnNaija team at EarnNaija Digital Technologies.

This article is general information, not financial or legal advice. Earnings are never guaranteed. See our fees page for the exact costs.