Anti-phishing codes: a useful signal that won't check your links

An anti-phishing code signals that an email is from the sender it claims, but it never checks where the links go. Reveal URLs shows each link's actual immediate URL and reddens it, by default, when the link's visible text itself contains a URL or host for a different site than that destination.