security/who-really-owns-this-link-read-a-web-address-before-you-click.md
Who really owns this link? Read a web address before you click
A scary message says your account is locked and the link has your bank's name in it. Does that make it safe? No: only the host part of a web address says who you are talking to, and it has to be read from right to left.
Learn how URLs are built, why mybank.example.secure-check.test belongs to someone else, and how an @ sign hides the real site. Then tap through six links and see each one split into owner and decoys.