How can I tell if a link is safe to tap?
Use a known route when a link asks you to sign in, pay or share details.
A link's label can hide a different address. Even a neat address or padlock does not prove that a site is honest.
On a computer, hovering may show the address. That is a clue, not a safety test. You do not need to open a phone preview to inspect a link.
For a private task, go through a known app or saved site instead of the message link.
- Leave the link unopened while you decide what the message wants.
- If it asks for money or account access, use the service's known app, bookmark or prior contact details.
- Check that the task is real through that route. Do not use a new phone number from the same message.
- If an address is short, hidden or unclear, find the information through a source you know.
- Keep your device and browser up to date. Do not paste private reset or sign-in links into ChatGPT.
Make a short checklist for an unexpected link that asks me to sign in. Use no real link. Focus on how to reach the service through a known route. Do not label a link safe.
Paste the message into ChatGPT, then fill in any blanks before you send it. ChatGPT opens in a new tab. Opening it does not send the message.
HTTPS protects the connection. It does not prove that the person running the site is honest.
Sources and more help
These links open in a new tab.