“Verify you're real by clicking this link”: what they can do with that detail

What's actually being said

When someone you have just met online sends you a link and asks you to 'verify' yourself, they are using trust as bait. The page may look like an official dating-site verification portal, a background-check service, or a security warning. It will ask for personal details, credit-card information, or your existing login credentials. Some versions claim the check is free but still collect card details for a 'pre-authorization' that becomes a recurring charge. Others harvest your username and password so the scammer can take over your dating profile and use it to target your matches. In the worst cases the link installs keyloggers, remote-access software, or mobile malware. The framing is always the same: 'I need to know you are who you say you are.' That sounds reasonable, which is why it works. But a genuine safety concern is solved by a video call or a public meeting, not by clicking an unsolicited third-party link.

The job this line is doing

Phishing gives the scammer everything at once: your identity, your accounts, your money, and sometimes control of your device. It is more efficient than weeks of romance-scripting because it exploits the goodwill of people who want to seem trustworthy. The 'verify you're real' framing also flips the power dynamic: suddenly you are the one being vetted, and refusing feels suspicious. Many victims click because they do not want to appear difficult or unsafe. Once the scammer has your credentials, they can impersonate you, lock you out of your own accounts, or sell your information to other criminals. The link may also be used to bypass app security by getting you off the dating platform and onto a website the scammer controls.

The usual next moves

1. 1You enter login credentials into a fake site and lose control of your dating or email account
2. 2Your credit card is charged for a fake verification service or subscription
3. 3Malware is installed on your phone or computer, giving access to messages and photos
4. 4Your stolen profile is used to scam other people in your name
5. 5The scammer uses the breach to escalate into blackmail or identity theft

The honest version of this

There is almost no innocent version of this request. A real person you already know might share a link to a public social profile or a professional portfolio, but they will not ask you to 'verify' your identity through a special site before a first conversation. Dating apps that offer verification do it inside the app, with a badge, not through an external URL. If someone insists on a link, treat it as a scam even if everything else seems normal.

What to say back

Already replied, paid or shared something?

If you clicked the link and entered any information, change the password for that account immediately and enable two-factor authentication. Check your bank or card statements for unexpected charges and contact your bank if you shared payment details. Run a malware scan on the device you used. Report the phishing site to the platform where the message was sent and to the FBI's IC3 at ic3.gov. If you reused the same password elsewhere, change those accounts too.

Suss explains common patterns in online dating messages. It is not a background check, not legal or financial advice, and a single line is never proof that someone is lying. Use it as one signal among several.