A simple guide to safer clicking · 安全点击简明指南

A link is not always
what it says it is.

链接显示的内容,不一定是真实的去向。

Before you click, pause and check where the link really goes.

点击之前,请先停一下,检查链接的真实去向。

Lesson 1 · 第一课

Displayed text ≠ real destination

显示文字 ≠ 真实去向

01

The words can hide another website

显示文字可能隐藏另一个网站

What you see · 您看到的https://www.usa.gov
Where it really goes · 实际去向https://www.google.com

The label says usa.gov, but the link opens google.com.
文字显示 usa.gov,但链接实际会打开 google.com。

02

An email address can be disguised

电子邮件地址也可以被伪装

What you see · 您看到的president@example.com
Where it really goes · 实际去向mailto:fraud-demo@example.net

The message would go to fraud-demo@example.net—not the address you see.
邮件会发到 fraud-demo@example.net,而不是您看到的地址。

Try this: On a computer, hover over a link without clicking. The true address usually appears at the bottom of the browser.
试一试:在电脑上,将鼠标停在链接上但不要点击。真实地址通常会显示在浏览器底部。

Lesson 2 · 第二课

Look closely. One character can change everything.

仔细看,一个字符就可能改变一切。

Expected · 正确Look-alike · 仿冒What changed? · 有什么不同?
paypal.com× paypaI.com

The last character is a capital I, not a lowercase l.
最后一个字符是大写 I,不是小写 l。

google.com× g00gle.com

Two letter o’s were replaced with zeroes.
两个字母 o 被替换成了数字 0。

apple.com× аррӏе.com

Some letters are from another alphabet but look similar.
部分字母来自另一种字母表,但外形很相似。

bank.example× bank-example.com

A familiar word does not make it the official domain.
包含熟悉的名称并不代表它是官方网站。

These are visual examples only. Do not type or visit the look-alike addresses. · 以上仅为视觉示例,请勿输入或访问仿冒地址。

Before you click · 点击之前

Stop. Look. Check.

停一下。看清楚。再核实。

  1. 1

    Pause if the message feels urgent.

    Scammers create panic: “Act now,” “Your account is locked,” or “You won a prize.”

    如果信息让您感到紧迫,请先停一下。骗子常说:“立即行动”、“您的账户已被锁定”或“您中奖了”。

  2. 2

    Check the entire address.

    Look for misspellings, extra words, strange endings, and @ signs in web links.

    检查完整地址,注意拼写错误、多余单词、奇怪的域名结尾,以及网页链接中的 @ 符号。

  3. 3

    Open the official site yourself.

    Use a saved bookmark or type the known address. Do not use the message’s link.

    使用已保存的书签或亲自输入已知的官方网址,不要点击信息中的链接。

  4. 4

    Ask someone you trust.

    Never share a password, verification code, bank PIN, or remote access to your device.

    请向您信任的人求助。切勿透露密码、验证码、银行卡密码,也不要让陌生人远程控制您的设备。