
Copy a link from an SMS, Messenger, WhatsApp, Viber or email and paste it below without opening it. We look for the tricks scammers use - fake eSewa, Khalti, bank and Facebook addresses, hidden destinations and more - and give you one-tap checks on VirusTotal and Google Safe Browsing.
The part that matters is the domain - the words just before the first single /. Read it from the right:
| Link | Real domain | Verdict |
|---|---|---|
| https://esewa.com.np/ | esewa.com.np | Genuine eSewa |
| https://esewa.com.np.verify-kyc.top/ | verify-kyc.top | Fake - "esewa.com.np" is only a decoration at the front |
| http://esewa-kyc-update.com/ | esewa-kyc-update.com | Fake - not owned by eSewa |
| https://[email protected]/x | bit.ly | Hidden - everything before @ is ignored |
http://103.21.4.9/, and look-alike letters (internationalised "xn--" domains).@ trick, unusually many sub-domains, and very long links stuffed with words like login, verify, KYC, prize or reward.http:// pages asking you to log in, and cheap domain endings popular with scammers.Call your bank or wallet provider immediately to block the account, then report it to the Nepal Police Cyber Bureau. Our step-by-step reporting guide lists what evidence to keep and who to contact.
This Cyber Safety Centre is a free public-awareness service of Shrijanshil Nepal, a non-profit organization in Nepal. The tools give guidance, not a guarantee - no checker can prove that a file or link is safe.