How to Check a Suspicious Link Before Clicking It

Step by Step

1. Use the official settings or website for the account, device, browser, or service involved.
2. Inspect the actual destination domain and independently open the organization's known official website instead of following an unexpected message link.
3. Review security and recovery settings after making the change.
4. Keep recovery information and backups somewhere you can access if the primary device is lost.

If That Doesn't Work

• Never give an unsolicited caller or message sender your password, recovery code, or one-time verification code.
• If money or a critical account is at risk, use a known official contact method rather than contact information supplied in the suspicious message.