Guide · Trust and privacy
Are short links safe? How to check one
A short link is safe when it shows where it goes before it goes there. This guide gives the checklist: what a well-run shortener reveals, what the destination should be checked against, and when to stop.
The risk a short link carries
A short link hides its destination; that is what makes it shareable and what makes it a delivery vehicle. OWASP counts unvalidated redirects among the classic vulnerabilities precisely because a trusted-looking address can send the reader somewhere else. The risk is not the shortening, it is the not-seeing.
What a good shortener shows
- The full destination address, before anything loads from it.
- The destination page's own title, so the words say what the address says.
- A warning instead of the destination when a review failed, and a report control when something is wrong.
- Expiry: a link that answered last week can be dead today, and the page says so rather than guessing.
The checklist before you continue
- Read the destination address on the preview page — the domain, not the words around it.
- Look the domain up if you do not recognise it; Safe Browsing's documentation describes the practice of checking a site's reputation before trusting it, and a search of the domain plus the word scam is the cheap version.
- Continue only for the site you expected. An unexpected domain is the whole of the warning sign.
What this service does on its side
Every destination is checked at creation and on opening: automated content review, the operator's own review queue, and visitor reports that stop a harmful link at once. A visitor who follows the checklist above is reading what the service already checked — the two layers work together, and the report button is the second one.
Questions
Are short links safe to click?
When the service shows the destination first and reviews what it serves, yes — the preview page puts the answer before the click, which is where the risk lives.
How do I see where a short link goes?
On this service, open it: the preview page prints the full address and the destination's own title before anything else happens.
What should I do with a suspicious short link?
Do not continue; use the Report control on the preview page. A reported link stops working while the review runs.
Can a short link hide a malware download?
It can try, which is why destinations are checked for malware and phishing at creation and on every open, and a flagged link is blocked from opening.
Sources
The documents this guide's statements rest on. Each link opens in a new page.