Phishing links: what to check before you click
paypal-secure-login.com is not PayPal. How look-alike domains work and how to read a link correctly.
Phishing messages work because the link looks right. Here is how to read one.
Read the domain from the right
The real domain is the part directly before the first single slash. In https://paypal.com.secure-check.net/login the domain is secure-check.net — not PayPal.
Watch for look-alikes
- Typos: paypa1.com, amaz0n.com
- Extra words: apple-id-verify.com, binance-support.io
- Look-alike characters: a Cyrillic "а" looks exactly like a Latin "a"
websurely.com flags domains that imitate well-known brands.
Do not trust the padlock alone
HTTPS only means the connection is encrypted. Scam sites get free certificates in seconds.
When in doubt, go direct
Type the address of your bank or shop yourself, or use their app. Never log in through a link in an e-mail or SMS you did not expect.
This article is general information, not legal or financial advice. If you have been scammed, contact your bank or payment provider immediately and report it to the police.