How to See Where a Link Really Goes Before You Click

When a friend sends you a link on WhatsApp starting with bit.ly or tinyurl.com, you can’t see which site it actually leads to. Because shortened links hide the real address, they can just as easily point to a harmless campaign page as to a fake site trying to steal your personal information. A large share of scam messages rely on exactly this ambiguity.

Yet seeing a link’s real address before clicking it — and even checking whether it’s safe — is a free process that takes only a few seconds.

Seeing the Real Address of a Short Link

CheckShortURL.com is one of the simplest tools for this. When you paste a shortened link into the site, it shows you the link’s real destination address without redirecting you anywhere.

Here’s how to use it:

1. Go to checkshorturl.com.
2. Paste the link you’re suspicious of (such as bit.ly, tinyurl, t.co, or goo.gl) into the box.
3. Click the “Expand” button.
4. You’ll see the real, full address the link points to.

unshorten.me does the same job and supports several popular shortening services.

Seeing the Address Isn’t Enough — Check Whether It’s Safe Too

Even after seeing the real address, you still can’t know whether that site hosts malicious content. This is where VirusTotal.com comes in.

VirusTotal is a free service owned by Google that scans a link or file with more than 70 different security engines at once.

1. Go to virustotal.com.
2. Switch to the “URL” tab.
3. Paste the link you want to check and scan it.
4. On the results screen, you’ll see how many security engines flagged that site as “malicious” or “suspicious.”

If no engine flags it, the site is most likely safe. If even a few engines raise a red flag, it’s recommended that you not click that link.

When You Should Run This Check

• Messages like “your package is here, click to arrange delivery” from a number you don’t recognize
• Emails with content like “your account has been suspended, click to verify”
• Curiosity-baiting social media posts like “everyone who watched this video was shocked”
• Discount or promo links circulating in WhatsApp groups

Messages like these are usually designed to create a sense of urgency so you click without thinking. Taking a few seconds to check the link is the most practical way to break that pressure.

Frequently Asked Questions

Is it safe to paste a link into these sites? Yes. Tools like CheckShortURL and VirusTotal don’t open the link on your behalf — they only analyze the destination address. You’re not actually clicking the link.

Does every shortened link mean danger? No. Platforms like Twitter/X, as well as many brands, use shortened links because of character limits or for tracking purposes. A short link on its own isn’t a warning sign, but it doesn’t hurt to check links whose source you’re not sure about.

Can I run this check on my phone too? Yes. checkshorturl.com and virustotal.com work the same way in a mobile browser — you don’t need to download a special app.

What if a link isn’t short but still looks suspicious? Links that look long can be fake too, especially fake domains where a single letter in a brand name has been swapped (for example, “paypall.com”). In that case as well, you can paste the address into VirusTotal to check it.