🐟Phishy

Think you got a scam? Check it free.

Paste a suspicious message, SMS or link — Phishy tells you in seconds if it's a scam. No signup, no cost.

🔒 Your message is only checked, never stored. Phishy collects no personal data.

What is phishing and how do you spot a scam?

Got a link and want to check it's safe before you tap? This free link checker follows the address through to its real destination — even when it's hidden behind a shortener like bit.ly — cross-references it against malicious-site databases (Google Safe Browsing, VirusTotal, PhishTank, OpenPhish) and analyses the wording of the message itself. Phishing scams arrive as an SMS, email or WhatsApp message impersonating your bank, a delivery company, an insurer or a government agency, trying to get you to click and hand over personal details, a password or a code. Paste the link or the message above — Phishy tells you straight away whether it's safe, suspicious or a scam. Free, no signup.

How to check a suspicious link or message — step by step

Paste the message or the linkPaste a whole SMS, a WhatsApp message, an email, or just the address on its own. Nothing needs cleaning up — Phishy finds the link inside the text.
Phishy follows the link to its real destinationShorteners like bit.ly hide where an address actually leads. The check runs in an isolated environment on our side — the link opens on our servers, never on your phone — and follows every redirect through to the final page.
You get a verdict with a reasonSafe, suspicious or scam — explained in plain language. Not just a score, but what specifically in the message raised the flag.

6 signs the message you received is a scam

Manufactured urgency — 'within 24 hours', 'your account will be suspended', 'your parcel will be returned'. The point is to make you act before you think.
A small, oddly precise amount — $1.95 in customs, £2.99 to redeliver. Too small to be worth checking, which is exactly the idea.
The address doesn't match the sender — a message claiming to be from the postal service that links to a domain that isn't theirs. Always read what comes after the // and before the next slash.
A shortened link in an official message — banks and government agencies don't send bit.ly links. A real organisation sends its own full address.
A request for a verification code — no legitimate organisation will ask you for the code it just sent you. Whoever asks is trying to get into your account right now.
Odd wording or spelling — machine translation, missing spaces, mixed alphabets. Less common than it used to be, but still a strong signal.

Frequently asked questions

Is it free?

Yes, completely free and no signup. Paste a message and get an answer instantly.

How does it work?

Phishy analyzes the message with AI and checks links against scam databases — returning a verdict in seconds.

Is my message stored?

No. The message is only checked, never stored on our servers, and we collect no personal data.

Can I check if a link is safe?

Yes. Paste any link or URL and Phishy works as a link checker — it analyzes the address and tells you in seconds whether the link is safe, suspicious or a scam.

What should I do if I already clicked?

Clicking alone is usually not enough to steal anything — the problem starts if you entered details. If you entered card details, call your card issuer immediately and freeze the card. If you entered a password, change it everywhere you reused it. If you handed over a verification code, contact the organisation directly and without delay.

Can I check a website address without a message?

Yes. Paste just the address — example.com, or a full URL — and Phishy checks the domain itself against malicious-site databases and tells you whether it's safe.

What is smishing?

Smishing is phishing delivered by SMS instead of email; the name blends SMS and phishing. It works because a text feels more personal and more urgent than an email, and because on a phone you can't hover over a link to see where it goes.

Does it work for emails and WhatsApp links too?

Yes. Paste the body of an email, a WhatsApp or Telegram message, or any other text. The check is identical — Phishy analyses the wording and every link it finds inside it.

Guides to the most common scams

All guides · Is this link safe? · What is smishing · Fake bank texts · Fake delivery fees · You have won scams · WhatsApp scams · Crypto investment scams

Want Phishy to check every message automatically — for your parents and kids too?

Download Phishy free ▶ Google Play