Most U.S. Internet Users Struggle to Spot Fake URLs
New research shows only 26% of Americans correctly identify malicious links, exposing a dangerous confidence gap.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust your own online habits more than security software to protect your data?
A NordVPN study released in October 2026 reveals that while many U.S. internet users are confident in their security habits, few can effectively identify malicious web links. The survey of 2,000 residents indicates a widespread reliance on common sense over technical verification, with high rates of misidentification for both legitimate and fake addresses.
Why it matters
The findings underscore a significant gap between user confidence and technical literacy in cybersecurity. This discrepancy leaves a large portion of the population vulnerable, as reliance on misconceptions like the safety of HTTPS prefixes persists despite the increasing sophistication of phishing tactics.
In a test where participants evaluated two nearly identical web addresses, only 26% of respondents correctly identified the malicious link. Meanwhile, 53% of users misidentified a legitimate web address as a scam, and 21% could not distinguish between the two options.
The players
NordVPN
A provider of virtual private network services based in the Netherlands that produces research on digital security and privacy trends.
The details
The survey measured digital vigilance by presenting participants with two nearly identical web addresses to assess their ability to spot phishing indicators. Many respondents rely on faulty heuristics, such as believing the HTTPS prefix—a protocol for secure communication over a network—automatically guarantees a website is safe. This reliance on incomplete indicators often leads users to mistakenly identify legitimate sites as malicious or, conversely, fail to detect deceptive URLs designed to mimic authentic domains.
Timeline
August 17-26, 2026: Researchers conducted the survey of 2,000 U.S. residents.
October 2026: NordVPN published the results of the research.
The Tech Race
This research highlights the persistent failure of user awareness efforts to keep pace with the evolving tactics of cybercriminals. It illustrates a widening gap where user confidence remains high despite documented inability to perform basic security hygiene, a trend observed across global security reports.
Users who assume that a secure HTTPS prefix or a general sense of tech-savviness protects them from threats are significantly more likely to fall for phishing attempts. To improve security, individuals should shift from trusting visual markers toward manually verifying domains and using modern password managers or security suites.
The takeaway
The data suggests that technical literacy among Americans is currently insufficient to identify sophisticated phishing links, despite widespread belief to the contrary. Readers should verify web addresses carefully and avoid using visual indicators like HTTPS as a sole proxy for site safety.
Further reading
For broader trends on digital threats, see more in Cybersecurity.
More information
View the complete results and methodology in the NordVPN survey information.
Live Poll
Do you trust your own online habits more than security software to protect your data?
