For texts, emails and DMs
Paste a link or a whole message. Peekray follows it, reads the address and checks it, without opening it in your browser.
How it checks
It looks like Royal Mail. The link is short, so you can’t see where it goes.
A made-up scam text, from +44 7700 900461: “Royal Mail: your parcel is on hold. Pay the £1.45 redelivery fee by midnight to rebook: rm-parcel.example/a7Q2”
Here’s a made-up scam text. Scroll to follow its link through Peekray.
It follows each redirect, without opening it in your browser, to where the link really lands.
The link went through 2 redirects: rm-parcel.example/a7Q2, then track-hop.example/r?id=91, and lands on royalmail.parcel-redelivery.example/pay. Peekray follows up to 4.
The real website is the last part before the first single slash. Here it’s parcel-redelivery.example, not Royal Mail.
In royalmail.parcel-redelivery.example/pay, royalmail. is a label in front, parcel-redelivery.example is the real website, /pay is the page.
Peekray watches 54,000+ known phishing and malware links from OpenPhish and PhishTank. This one is too new to be listed yet.
OpenPhish: not listed. PhishTank: not listed. URLhaus: not listed. Too new to be on a list yet
Jev, TypeSafe AI’s decision model, answers four questions about the link, where it leads and its text.
Jev’s answers in this made-up example: looks like phishing 0.94, link text doesn’t match 0.81, spammy 0.62, overall: a scam? 0.95. Answered in 640 ms.
Scam: it pretends to be Royal Mail and asks for card details. You get an answer such as Safe, Check first, Suspicious or Scam, with the reasons.
The answer in this made-up example: Scam. It goes to parcel-redelivery.example. Why: Lookalike domain, Asks for sign-in or card details, Hidden destination, Fake urgency.
One tap makes a warning card for the family group, with the link written safely so nobody can tap it.
The warning card says: Scam alert. A fake Royal Mail link is going round. Where it really goes: parcel-redelivery[.]example. Not Royal Mail’s website. Why: Lookalike domain, Asks for sign-in or card details, Hidden destination. Don’t tap it. Report scam texts to 7726 and scam emails to report@phishing.gov.uk. It is shared to the family group on WhatsApp, and on X.
The link is made up and leads nowhere, so the checker’s answer may differ.
Where it works
In Chrome, in your inbox and on your phone. The same check, the same clear answer.
Chrome extension
Choose Check this link with Peekray to check it on the spot. A red ! on the toolbar flags a likely scam.
Gmail and Outlook
On the sites you visit, Gmail and Outlook in the browser included, a tag shows where a link really goes before you click. No new tab, no guessing.
peekray.com on a phone
It finds the links in the text and checks up to 8 at once. Three ways on a phone
Screenshot check
Choose it on the phone page. Peekray reads its words on your device, then checks the links it finds. Only the web addresses are sent.
The scenes are made-up examples: their addresses end in .example and lead nowhere. www.gov.uk is a real site, shown as Safe.
In the extension
When a link looks risky, pick what already happened: you haven’t opened it, you opened it, you typed a password, or you paid. Peekray shows the next steps, such as who to call and where to report it. It’s in the extension’s toolbar popup and under a warning on this site.
Every warning comes with its reasons, like “The address pretends to be a well-known brand” or “Registered this week, and already asks for a login”, so you can see what’s wrong for yourself.
Right-click a link and choose Check this link with Peekray to check it on the spot, without resting the pointer on it.
Gmail and Outlook in the browser are covered: rest the pointer on a link in an email and a tag shows where it really goes.
The Peekray icon in the toolbar shows a red ! when a link Peekray checked on the page is a likely scam. Click it to see the latest links checked on that page, each with its answer, or paste a link to check it without opening it.
It installs from the Chrome Web Store, which Microsoft Edge can use too. Move to a link with the Tab key and the same tag appears as when you rest the pointer on it.
On your phone
Scam links don’t only come by email. On your phone, Peekray checks the links in a text, a WhatsApp message or a QR code before you tap.
Copy a text, WhatsApp message or email, open Peekray and tap Paste and check. It picks out the links (up to 8) and checks each one.
Once Peekray is on your home screen, press and hold a message, tap Share and choose Peekray. It checks the links straight away.
Point your camera at a QR code on a poster, parcel card or parking sign, or pick a photo of one. The code is read on your phone, and only the web address in it is checked.
Only the web addresses are sent for checking. Screenshots are read on your device, and our server never reads or keeps the rest of your message.
It opens like an app, straight from your home screen. No app store, no account.
iPhone, in Safari
Android, in Chrome
iPhones don’t let websites appear in the share menu, so on iPhone Peekray works with Paste.
On a computer? Scan this with your phone’s camera to open the phone page.
Powered by Jev
Jev is TypeSafe AI’s decision model. Peekray asks it about the links no list knows yet.
Most checks finish in under a second, start to finish, so the answer is there while you hover.
Lists only know scams someone has reported. Jev judges the rest, including brand-new sites.
Jev answers with a verdict Peekray can act on, not a paragraph for you to read.
Peekray’s own rules can make Jev’s answer more careful, never less.
Other ways to check a link
Privacy
Only the link you point at is checked. No account, nothing sold, no ads. Details in the privacy policy.
Verdicts10 minutes
Site registration dates7 days
Wrong-answer reports, if you send one90 days
Daily totals, with no links1 year
An example: sent when you hover a link
Email addresses and long numbers are taken out of the page title before it leaves your browser.
Then, on our server
Guides
Short and plain: how each one works, how the real company contacts you, and what to do if you already tapped.
A free Chrome extension that shows where a link really goes before you click it. It follows short links and redirects, checks the link against public phishing and malware lists, and asks Jev, TypeSafe AI’s decision model, about links no list knows. If a link looks like a scam, Peekray warns you and asks before opening it.
Yes. LinkGuard was renamed Peekray in October 2026. It’s the same extension on the same Chrome Web Store listing, so if you already have it, it updates by itself.
Rest your pointer on it with Peekray installed, or paste it into the checker on this page. Peekray follows the link to where it really lands, looks it up in public phishing and malware lists, and gives you a clear answer such as Safe, Check first or Scam.
Yes. There is no account and nothing to pay.
Chrome’s Safe Browsing warns you when you open a page on Google’s list of known dangerous sites. Peekray works earlier: it shows where a link goes while you hover, checks it against three public phishing and malware lists, and has Jev judge links no list knows yet. They work well together, so keep Safe Browsing switched on.
Yes, through the website. Paste a text, email or link into it and it checks the links in it (up to 8). On Android, add Peekray to your home screen from Chrome and you can also share messages and links to it. On iPhone, add it to your home screen from Safari, copy the message and tap Paste and check. You can also choose a screenshot of a message, which is read on your phone, or scan a QR code with the camera or pick a photo of one. Only the web addresses in a message, screenshot or QR code are sent for checking.
Yes, on your phone. Open the phone page, tap Scan with camera and point it at the code, or pick a photo or screenshot of one. The code is read on your phone and only the web address in it is checked. Codes that aren’t web addresses, like Wi-Fi logins or payment details, stay on your phone.
No. Peekray only sends the link you hover, focus or click, that link’s text, and the page title (with email addresses and long numbers taken out). It never reads form fields, passwords or cookies, and nothing else from the page is sent.
OpenPhish, PhishTank and URLhaus, three public lists of reported phishing and malware links. Peekray keeps a copy on its server, refreshed about once an hour while Peekray is in use and at least once a day, so looking a link up never sends it to the list providers.
No tool does. Some links get a grey “Check first” instead of Safe even when Peekray finds no scam signs: pages on free site builders, shared documents and other places where anyone can publish, some sites that use the name of a delivery firm or other big name Peekray knows, without being its site, and sites the registry says were registered in the last 30 days. If Jev can’t answer, only well-known sites are called Safe. If it gets a link wrong, tap “Wrong answer?” under the result (or “Wrong?” in the extension’s popup) to tell us. Keep your browser’s own protection switched on too.
If you use Chrome’s Enhanced protection, Chrome shows that note on extensions from developers who are new to the Chrome Web Store, and Peekray is new. It isn’t a finding that Peekray is harmful. Google says new developers generally become trusted after a few months of following the store’s rules, and every Peekray version is reviewed by Google before it’s published. What Peekray sends is listed under “Does it read my passwords?” above.
Yes. Peekray’s server follows short links and redirects, up to four hops, and shows where they land, so you see the real site before your browser goes anywhere.
Links that point away from the host you’re on (another site, or another part of it like shop.example.com), and same-host links that carry another site’s address (like /url?q=…), including links inside frames and most web components. Links inside other apps, and javascript: or data: links, aren’t checked.
A click waits up to 2.5 seconds for a verdict. If none arrives and the address itself has warning signs (a short link, an unusual ending, an IP address), Peekray asks before opening. Otherwise the click goes through, so browsing never gets stuck.
Yes. Click the Peekray icon in the toolbar and switch off “Checks on this site”.
Free for Chrome
Rest on a link, or right-click it, and see where it really goes. Peekray asks before a likely scam opens.
Free on the Chrome Web Store. Using Edge? Install it from there too.
On a phone? Paste a message at peekray.com/share
