TL;DR
Bitly links can be risky because they hide where you’re actually going. Attackers use this to trick people into visiting harmful websites. Here’s how to stay safe and check if a Bitly link is dangerous.
1. Why Bitly Links Are Risky
Bitly shortens long URLs (web addresses). This means you can’t see the real destination before clicking. Attackers exploit this by:
- Phishing: Creating links that look legitimate but lead to fake login pages to steal your passwords.
- Malware: Directing you to websites that download viruses or other harmful software.
- Scams: Sending you to misleading sites designed to trick you out of money or personal information.
2. Checking a Bitly Link Before Clicking
There are several ways to see where a Bitly link leads *before* clicking it:
Step 1: Use a URL Expander
Several websites can expand Bitly links for you. Here are some options:
- Unshorten.it: https://unshorten.it/
- CheckShortURL: https://checkshorturl.com/
Simply paste the Bitly link into one of these sites and click ‘Expand’ or a similar button.
Step 2: Preview with VirusTotal
VirusTotal is a website that scans URLs for known threats. It’s more thorough than simple expansion:
- Go to https://www.virustotal.com/gui/home/url
- Paste the Bitly link into the search bar and click ‘Search’.
- VirusTotal will show you if any security engines flag the destination URL as malicious.
Step 3: Hover Before Clicking (Desktop)
On a computer, hover your mouse cursor over the Bitly link (without clicking!). Your browser should display the full URL in a small box somewhere on the screen.
3. What to Do If a Link Looks Suspicious
- Don’t Click It: This is the most important step!
- Examine the URL: Look for anything unusual, like misspellings of common websites (e.g., gooogle.com instead of google.com) or strange characters.
- Check the Domain: Is the domain name legitimate? A quick Google search can help you verify if it belongs to a trusted source.
- Report Phishing: If you suspect a phishing attempt, report it to the relevant organisation (e.g., your bank or email provider).
4. Bitly Attack Pages – What are they?
Sometimes attackers create entire websites *hosted on* bit.ly domains that look like legitimate login pages. These aren’t just shortened links; the whole page is fake.
Step 1: Check the SSL Certificate
Look for a padlock icon in your browser’s address bar. Click it to view the certificate details. A valid certificate doesn’t guarantee safety, but an invalid or missing certificate is a major red flag.
Step 2: Inspect the Page Source (Advanced)
Right-click on the page and select ‘View Page Source’ (or similar). Look for suspicious code, like forms that send data to unknown servers. This requires some technical knowledge.
5. Staying Safe with Bitly
- Be cautious: Always be skeptical of links received from unknown sources.
- Verify the sender: If you receive a link from someone you know, confirm they actually sent it before clicking.
- Use strong passwords and two-factor authentication: This helps protect your accounts even if your password is stolen.