How to identify a real Moov link
The domain must be exactly moov.money.
Here, the actual domain is example.com.
Scammers send fake links designed to look like a payment or a request. The page they lead to is a copy of ours, and the only thing it does is collect your card details or your one-time code. Reading the web address is how you catch it.
What a real link looks like
Every genuine Moov link starts with the same thing:
https://moov.money/There are two kinds you'll see in practice:
Link | What it is |
|---|---|
| A payment waiting to be claimed. Someone sent you money. |
| A request for payment. Someone is asking you for money. |
The characters after the last slash are unique to that one payment or request. They're the secret that unlocks it, which is why a link should be treated like a private message and never posted or forwarded.
How to read a web address
The important part is the domain, which is the text immediately before the first single slash. Everything to the left of it can be anything the scammer wants.
https://moov.money/c/ab12cdis real. The domain ismoov.money.https://moov.money.secure-pay.com/c/ab12cdis not. The domain issecure-pay.com, andmoov.moneyis just a label stuck on the front.https://moov-money.com/c/ab12cdis not. A hyphen is not a dot.https://m00v.money/is not. Look closely at letters that have number lookalikes.
Read right to left from the first slash. That single habit catches most fakes.
Checking a link before you open it
On a phone, press and hold the link. A preview appears showing the full address. Read the domain, then dismiss it if it's wrong.
On a computer, hover over the link and read the address in the corner of the browser.
With a shortened link, don't. A shortener hides the destination entirely, and we don't use them.
If you're already on the page, check the address bar rather than the page content. Logos, colors, and layout are easy to copy. The domain isn't.
What a fake page asks for
A real Moov page asks you to verify your phone number, and it asks for the debit card or wallet you want to use. That's it.
Be suspicious of any page that asks for:
Your online banking username or password. We never need these.
Your PIN.
Your full card number typed alongside a one-time code you're told to share.
A fee to unlock, verify, or release a payment.
Remote access to your device, or an app to install.
If the link came from a stranger
Moov links are normally shared by someone you know, by text. A link from a number you don't recognize is worth ignoring even if the address checks out, because a real link to a real payment from a stranger is its own kind of scam. See Common scams to watch out for
Good to know
If you're unsure and the link claims to be a payment for you, do nothing. An unclaimed payment waits 10 days, so there's no harm in taking an hour to ask the sender directly whether they sent it.