Link Scam Checker

How these scams work

1. Scammers register look-alike domains — typosquats (sbi-kyc-verify), homoglyphs (using look-alike characters), or deceptive subdomains (hdfcbank.secure-login.top).
2. They hide the destination behind link shorteners or suspicious TLDs (.xyz, .top, .click).
3. The page mimics a real login or payment screen to capture your credentials or card details.

Red flags

• Shorteners (bit.ly, tinyurl) or odd TLDs
• Brand names as a subdomain with a different root domain
• Misspelled or character-swapped brand names
• http:// (no HTTPS) on a "bank" page

Real examples

• http://sbi-kyc-verify.xyz
• http://hdfcbank.secure-login.top
• https://asquaresolutlon.com (note the "l" instead of "i")

How to protect yourself

• Read the domain, not the link text — check the part right before the final ".com/.in".
• Never share an OTP, PIN, CVV, or password — no bank or company ever asks for them.
• Verify in the official app or website you typed yourself — never via a link in a message.
• Slow down: scammers manufacture urgency ("account blocked", "act now") to stop you thinking.