Best practices for safely using shortened URLs at UCT

At UCT, we strive to maintain a secure online environment for all staff and students. As part of our ongoing efforts to ensure safe and responsible use of digital tools, it's important to stay informed about the potential risks associated with common online practices, such as using shortened Uniform Resource Locator’s (URL).
While these shortened links make sharing easier, they also come with security concerns that can lead to phishing attacks and other cyber threats.
In this article, we’ll explore
-
what shortened URLs are
-
why caution is necessary
-
how you can protect yourself when encountering them online
What are shortened URLs?
Shortened URLs are links that have been condensed using services like TinyURL, Bit.ly, or other URL shortening tools to make them easier to share. They are commonly used in emails, social media posts, and other digital communications to simplify long URLs.
Why should you be cautious?
Shortened URLs are convenient, but come with security risks. They hide the actual destination, which cybercriminals can exploit to redirect users to malicious websites. Clicking on an unknown shortened link can expose you to phishing attempts, malware, or fraudulent sites.
UCT's approach to shortened URLs
ICTS is evaluating the implementation of a UCT-managed URL shortener. This solution would offer a trusted and secure option for staff and students to shorten links for official communications.
Preview a shortened URL
Before clicking on a shortened link, it’s important to check where it leads to avoid potential security risks. If you're unsure which service was used to shorten the URL, you can use a universal link-expanding tool such as CheckShortURL, GetLinkInfo, or WhereGoes to reveal the original link destination.
If you recognise the shortener, copy the shortened link and paste it into your browser's address bar to preview the destination, then apply the relevant method listed below.
Shortener |
How to preview |
Example |
TinyURL |
Add preview. before "tinyurl.com" |
preview.tinyurl.com/abcd123 |
Bit.ly |
Add + at the end of the URL |
bit.ly/abcd123+ |
Ow.ly (Hootsuite URL shortener) |
Add http://ow.ly/ before the shortened URL |
http://ow.ly/abcd123 |
is.gd |
Add preview. before the URL |
preview.is.gd/abcd123 |
TinyCC |
Add ? at the end of the shortened URL |
tiny.cc/abcd123? |
T2M |
Add ? at the end of the shortened URL |
t2m.io/abcd123? |
BL.INK |
Add /expand at the end of the URL |
blink.to/abcd123/expand |
Best practices for safe use
-
Only click shortened URLs from trusted sources to avoid potential risks of phishing or malicious websites.
-
Always verify the destination of shortened URLs to protect yourself from phishing scams and fraudulent links
-
When shortening URLs, avoid exposing sensitive login pages or confidential information to ensure privacy and security.