@ userinfo trick
Everything before @ in a URL is a username, not the destination, so a trusted-looking name can precede the real host.
How to spot it
- A URL containing @ before the host
What to do
Ignore everything before the @; the host is what follows it. Do not open such links.
What the real thing looks like
- Normal URLs with no @
- Email addresses (an @ is expected there)
Try an example
A practice example with fictional companies. Answer it, then see the tells.
Test yourself on eight more
The free quiz mixes scams with legitimate messages, like real life. No sign-up.