Breach CheckIs this link dangerous?
Received a suspicious text, email or message? Paste the link here before you open it. We check it against known lists of scam and malware sites and for typical tricks.
- Free
- We never open the link
- Link stays on your device
Check link
No protection is perfect: the check may miss dangerous sites and, in rare cases, flag harmless ones. Do not rely on it alone.
Warning: Likely dangerous site
Warning signs
No known threat found
The link is not on any known list of dangerous sites, and we found no typical warning signs. That does not mean the site is safe – new scam sites are often not listed yet. Stay careful if the site asks you for data.
We store nothing and never open the link.
Data on dangerous sites: Google Safe Browsing. No guarantee of accuracy.
How we check without reading along
- Warning signs right in your browserYour browser checks the link for typical tricks: imitated brand names, short links, bare IP addresses, disguised special characters.
- Only fragments of fingerprintsTo compare it with Google Safe Browsing, your browser creates fingerprints (SHA-256) of the link. Only 4 bytes of each go via our server to Google – never the link itself.
- We never open the linkNeither your browser nor our server visits the site. That way, it cannot harm you or us.
How to spot phishing links yourself
Scammers rely on time pressure and well-known names. These rules help you see through most traps.
- Read the domain from the rightWhat counts is the part right before the first ending: “paypal.com.account-check.example” takes you to “account-check.example”, not PayPal.
- Be wary of time pressure“Account locked”, “parcel waiting”, “final reminder” – real companies rarely set you a deadline by text message.
- Open it yourself insteadIf in doubt, don’t click: open the app or type the known address yourself and check there whether anything is really pending.
- Never enter data via linksBanks and parcel services never ask for passwords, PINs, TANs or card details via a text message link.
Frequently asked questions
Is my link stored or opened?
No. The link stays in your browser. Only 4 bytes of each fingerprint (hash prefixes) reach our server, which passes them on to Google Safe Browsing. Nobody opens the site.
Where does the data on dangerous sites come from?
From Google Safe Browsing, a list of known phishing and malware sites. In addition, your browser checks typical warning signs that we defined ourselves.
What does “no known threat found” mean?
The link is not on any known list and shows no typical warning signs. However, new scam sites are often only listed after hours. Be careful if a site asks you for data.
I already clicked and entered data – what now?
Change the affected password immediately, and everywhere you use it. For bank or card details, call your bank right away. Turn on two-factor authentication and watch your statements.
More free checks
Also check whether your email address appears in data breaches or how secure your password is.