
Shortened URLs can be convenient, but they also hide the full destination from immediate view.
If an unfamiliar shortened link arrives through a social-media message, avoid assuming it's safe because it came from someone you know—their account could also have been compromised.
For unexpected account, payment, or verification messages, access the service independently instead.
Convenience shouldn't remove the step where you verify where a link is actually taking you.
© CISA