Here are some warning indicators to assist you distinguish between trustworthy links and fraudsters.

It is most likely a fraud if you receive a random text message requesting that you click on a link.
Karl Tapales/Getty
The majority of us are getting phishing emails and messages more frequently than previously, regardless of whether you attribute this to artificial intelligence or data breaches. The bad news for victims who unintentionally click on a harmful URL while going about their hectic lives is that scam URLs are becoming more difficult to identify.

Tech Advice

The FBI’s Internet Crime Complaint Center reports that in 2024, spoofing and phishing schemes caused losses of almost $70 million. To fool regular people, many connections use names that seem like authentic websites and typical “https” encryption.

You can lose money if you click on a fraudulent link. However, you run the danger of letting criminals access your identity and credit card details, or even having malware infect your device.

How to spot URLs that are scams

Phishing emails, texts, and other communications made by hackers frequently contain scam links. They are intended to trick you into installing malicious software or visiting a phony website in order to get your personal data. Popular phishing schemes include job scams, gold bar scams, and unpaid toll scams.

These connections are usually distributed in large quantities by criminals, sometimes with the help of artificial intelligence. Every year, enough individuals fall for phishing schemes that it is worthwhile for scammers to use the same strategy.

Here’s how not to fall for the trick.

Verify the URL
Joshua McKenty, CEO of Polyguard.ai, a cybersecurity startup that assists companies in protecting mobile phones and contact centers against AI-driven phishing scams, stated that “attackers use tricks to make their links clickable, even though smartphones do their best to block scam links.”

For instance, he said, you should look for the “@” symbol in the URL or the possibility of having two distinct URLs “glued together” by a question mark. particularly if the initial URL is a link to Apple.com or Google.com.

You might be able to hover over the URL to see the true location, said Dave Meister, a cybersecurity spokesperson for the international cybersecurity firm Check Point. Additionally, people should be on the lookout for “typo-squatting,” which occurs when a URL appears genuine but contains “PayPa1” rather of “PayPal.” That ought to warn you that the link is faulty.

Keep in mind the URLs you visit often.
Everyone should be mindful of the URLs they often visit.

“Major brands, especially banks and retailers, don’t often change up their domain names,” McKenty stated. “If Chase.com is in the link, it’s probably secure. Avoid it if it says Chase-Banking-App.com.

Watch out for short links.
Social media and communications frequently contain brief links. “Sadly, there’s no safe way to check a shortened URL,” McKenty stated. He advised against clicking on them.

Because they frequently use the usual “https://” encryption, “Bit.ly” or “shorturl” links seem reliable. To spot the scam in these situations, it’s essential to read the communication itself and take note of any threatening language or calls to action.

How do victims receive links to scams?

Scams via text
Paradoxically, these aren’t necessarily dependent on connections to websites. According to McKenty, phone numbers are really a common tool utilized by fraudsters in their phishing operations.

“People get tricked into clicking a phone number that’s not actually their bank or the IRS, and then surrendering identity information on the phone,” he stated.

Even while it could be tempting to meddle with someone you believe to be a scammer, try your best to avoid doing so. If you communicate with the scammer, they could wish to get in touch with you again.

Scams via email
Scam links may also be included in emails.

Although more people are clicking on links and phone numbers in messages, McKenty stated that “the biggest dollar losses are still the classic email scams.”

To thoroughly review a link before clicking, he advises pasting it into a note-taking program.

Scams with QR codes
Scams can occasionally even be included into a QR code.

“QR codes have become the new stealth weapon, used everywhere from restaurant menus to parking meters,” Meister stated.

“Scammers are known to slap fake codes on top of real ones in public, or embed them in phishing emails, linking to cloned websites or malware downloads,” he stated.

Verify that the QR code makes sense before scanning. It’s best to stay away from it if it’s in an unfamiliar email, on the side of a gas pump, or on a random park bench.

Direct messages on social media
It’s likely that you have encountered these fraudulent links. Cybercriminals may impersonate individuals you know to hack social media accounts.

Call your uncle first if your “uncle” sends you a direct message urging you to click on a link to learn more about this investment opportunity, sounding like a pushy timeshare salesperson.

What if I clicked on a link already?

Numerous things may occur if you clicked on a fraudulent link. The firewall most likely prevented it if your device was protected by software. You may have an issue if you don’t have software that guards against malware and computer viruses.

If you believe you may have clicked on a phishing link, try these suggestions:

Obtain antivirus software. You should buy an anti-virus program if you don’t already have one to help remove infections from your desktop or laptop. Both paid and free choices are widely available.
Watch out for malware. Malware can still infect your phone. Scam links are frequently made to fool people into installing malicious software, which allows the scammer to take control of your phone. Avoid using any financial applications on a phone that has malware on it. Alternatively, try a factory reset, delete any unfamiliar applications, or clear the cache in your browser. You might also contact your phone’s tech support if you’re truly stuck. If your phone is infected, it may be sluggish or slow, and you may notice more pop-up advertisements.
Speak with your credit card company or bank. To be safe, notify your financial institution if you have been using a hacked device to access your bank’s website or app.
Speak with the police. To help the Federal Trade Commission raise awareness of the scam, submit any instances in which you were defrauded of your money after clicking on a spam link. Additionally, you should call your police agency and anybody else that comes to mind. People are less likely to fall for a fraud if they are more aware of it.

Disclaimer

This article is for educational and informational purposes only. It may reference expert opinions, data, and reporting originally published by third-party sources including CNET, Getty Images, and others. All product names, logos, trademarks, and images are the property of their respective owners. This site does not claim ownership of such content. If you believe any material should be credited differently or removed, please contact us. The information provided is not legal or financial advice.