--- title: "Phishing links: how to spot a fake login page | TapSafely" url: https://tapsafely.com/scams/phishing-links source: TapSafely description: "Learn the one skill that stops most scams: reading who really owns a link. With examples of look-alike addresses and fake login pages." --- [Home](https://tapsafely.com/)/[Scam guides](https://tapsafely.com/scams/)/ Phishing links and fake login pages # Phishing links and fake login pages Most online scams end in the same place: a web page that looks real and asks you to log in or pay. Learning to read a web address takes two minutes and protects you from almost all of them. By the TapSafely editorial team · Updated 16 September 2026 · 3 min read ## In short Learn the one skill that stops most scams: reading who really owns a link. With examples of look-alike addresses and fake login pages. **Top warning signs:** The brand appears, but not as the real domain; Look-alike spelling; Extra words. **First thing to do:** Don't log in from links in messages. Use the app, or type the address yourself. Example · Email · Illustrative, links disabled Account Security We noticed unusual sign-in activity on your account. Your account has been limited. Please verify your information within 24 hours to restore full access: paypal.com.account-verify[.]info/login An example scam message with the warning signs highlighted. ## How the scam works Phishing pages copy logos and layouts perfectly. The only part a scammer can't fake is the **real domain name**: the name right before the first single “/”, together with its ending (.com, .co.uk and so on). ## Red flags to look for - **The brand appears, but not as the real domain.** **paypal.com.account-verify.info** belongs to **account-verify.info**. Read from the right. - **Look-alike spelling.** **paypa1**, **arnazon**, **micros0ft**, or special characters that look like normal letters. - **Extra words.** **secure-login-**, **-verify**, **-support**, **-refund**. - **Shortened links.** bit.ly and similar hide the destination. Our checker follows them for you. - **Brand-new domains.** Days-old websites asking for logins are almost always phishing. ## What to do if you get one 1. Don't log in from links in messages. Use the app, or type the address yourself. 2. Paste unsure links into TapSafely. We show the real owner, age and where the link really goes. 3. Use a password manager: it won't auto-fill your password on a fake domain, which is a great early warning. ## Read a link from right to left | Link | Real owner | Verdict | | --- | --- | --- | | `https://www.amazon.co.uk/orders` | amazon.co.uk | Genuine domain | | `https://amazon.co.uk.refund-centre[.]top` | refund-centre.top | Fake | | `https://login.microsoftonline.com` | microsoftonline.com | Genuine domain | | `https://micros0ft-login[.]com` | micros0ft-login.com | Fake (zero instead of o) | ## If you already paid or shared details ### Act quickly. It makes a difference. 1. Change the password on the real site, and anywhere else you used it. 2. Turn on two-step verification and check account settings for new forwarding rules or devices. 3. If you entered card details, call your bank. More help: [what to do after a scam, and where to report it in your country](https://tapsafely.com/been-scammed). ## Questions people ask Is a link safe if it starts with https? No. https only means the connection is encrypted, not that the site is honest. ## Official sources and further reading We check our guides against advice from government agencies and consumer protection bodies. - [How To Recognize and Avoid Phishing Scams](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams) (US Federal Trade Commission) - [Phishing scams: how to spot and report them](https://www.ncsc.gov.uk/collection/phishing-scams) (UK National Cyber Security Centre) - [Phishing scams](https://www.scamwatch.gov.au/types-of-scams/phishing-scams) (Scamwatch, Australian Competition and Consumer Commission) ### Got a message like this? Paste the message or link Check it free ### Still unsure? Describe what happened and our AI assistant will help, in any language. Ask TapSafely ### On this page 1. [How it works](#how) 2. [Red flags](#red-flags) 3. [What to do](#what-to-do) 4. [Read a link from right to left](#s0) 5. [If you already paid](#already-paid) 6. [Questions](#faq) 7. [Sources](#sources) ### Seen this scam? Your report helps warn people in your area. [Report it](https://tapsafely.com/report?category=phishing) ## Related guides [Guide ### Verification-code and account-takeover scams “I sent you a code by mistake, can you send it back?” How scammers steal WhatsApp, email and bank accounts with one-time… Read guide](https://tapsafely.com/scams/verification-code-scams)[Guide ### Fake delivery texts and customs-fee scams Got a text saying your parcel is on hold until you pay a small fee? See how fake delivery texts work, the red flags, and… Read guide](https://tapsafely.com/scams/fake-delivery-texts)[Guide ### Fake online shops Huge discounts, countdown timers and a shop that never delivers. How to check whether an online store is real before you… Read guide](https://tapsafely.com/scams/fake-online-shops)