Best free phishing URL checkers compared
The best free phishing URL checker depends on the job. For the widest threat coverage in one scan, VirusTotal and URLVoid aggregate dozens of engines. For a fast, no-login verdict with plain-English advice on what to do next, Relaymetry checks a URL against Google Safe Browsing and flags common phishing patterns. This page compares five free tools on objective features, with honest notes on where each one wins.
How these tools differ
All five tools take a URL and tell you whether it looks malicious, and none of them need you to install anything. What differs is the signal behind the verdict. VirusTotal and URLVoid query many antivirus and blocklist vendors at once, so they cast the widest net. PhishTank draws on community-verified phishing reports. Google Safe Browsing Site Status queries Google's own blocklist directly. Relaymetry runs on that same Safe Browsing signal plus its own heuristic checks, so it does not out-detect a multi-engine aggregator, and this page says so plainly. Where Relaymetry earns its place is around the verdict: no login, an instant plain-English answer, and step-by-step guidance for anyone who has already clicked a suspicious link.
| Relaymetry | EasyDMARC Phishing URL Checker | Google Safe Browsing Site Status | VirusTotal | URLVoid | PhishTank | |
|---|---|---|---|---|---|---|
| Detection signalswhat the verdict is based on | Safe BrowsingMulti-engineCommunity reportsOwn heuristics | Safe BrowsingMulti-engineCommunity reportsOwn heuristics | Safe BrowsingMulti-engineCommunity reportsOwn heuristics | Safe BrowsingMulti-engineCommunity reportsOwn heuristics | Safe BrowsingMulti-engineCommunity reportsOwn heuristics | Safe BrowsingMulti-engineCommunity reportsOwn heuristics |
| No login | Yes | Yes | Yes | Yes | Yes | Yes |
| Bulk or multiple URLs | No | Yes | No | No | No | No |
| Public API | No | Yes | Yes | Yes | Yes | Yes |
| What-to-do guidance | Yes | No | No | No | No | No |
| Free-tier catch | No login or email | Free checker; full platform needs an account | Raw status; API is separate | Login for API and higher limits | API is paid (APIVoid) | Community database; API key needed |
Related comparisons
Common questions
Which free phishing URL checker is most thorough?
For raw detection breadth, a multi-engine aggregator like VirusTotal or URLVoid checks a URL against many vendors at once, so it catches threats a single source can miss. The trade-off is noisier output and the odd engine that lags. If you want a quick yes-or-no with advice on what to do next, a single-source checker such as Relaymetry, built on Google Safe Browsing, is faster and clearer. When the stakes are high, run the URL through more than one tool.
Is it safe to check a link I think is phishing?
Yes. Every tool here inspects the URL string and public reputation data, it does not open the page in your browser, so pasting a suspicious link into a checker is safe. What is risky is visiting the link yourself to see what it is. If you have already clicked one, our guide on what to do after clicking a phishing link walks through the steps.
Do these tools need an account?
For a single URL check, most do not. VirusTotal, URLVoid, PhishTank, Google Safe Browsing Site Status, and Relaymetry all return a verdict without a login. Accounts and API keys come into play for bulk scanning or programmatic access, which the table marks per tool. To judge a link yourself, see how to tell if a link is safe.