# Invisible Character Detector

URL: https://phishdestroy.io/developer-tools/invisible-char-detector
Category: Phishing URL & domain
Where it runs: Runs locally (nothing you enter is uploaded)

Paste a link, file name, user name or message to list every hidden or deceptive character with its position and code point, see the text with visible markers and copy a cleaned version.

## Example input

Right-to-left override in a file name

```
Invoice_7782‮fdp.exe
```

Finds one RIGHT-TO-LEFT OVERRIDE (U+202E) after Invoice_7782: it makes the name display as Invoice_7782exe.pdf although the file ends in .exe. The cleaned copy is Invoice_7782fdp.exe.

## FAQ

### Which characters does it detect?

Zero-width characters (U+200B to U+200D, U+2060, U+FEFF, U+180E), bidi controls (U+202A to U+202E, U+2066 to U+2069, LRM, RLM, ALM), unusual spaces, the soft hyphen, the grapheme joiner, Hangul fillers, tag characters (decoded to the ASCII text they hide), variation selectors, interlinear annotation marks, invisible math operators, control characters and other format characters.

### Is every finding a sign of an attack?

No. Non-breaking spaces are common in copied text, and emoji use joiners, variation selectors and tag characters for flags; these are listed as notes. Bidi overrides, tag characters outside a flag and long runs of variation selectors are the strong signals.

### Is my text sent anywhere?

No. Scanning and cleaning run on this page and nothing is uploaded. Texts up to 1 MB are scanned in full; longer input is cut at 1 MB.

## Related tools

- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Unicode Inspector](https://phishdestroy.io/developer-tools/unicode-inspector)
- [Link Unwrapper](https://phishdestroy.io/developer-tools/link-unwrapper)
- [Multi-Layer Decoder](https://phishdestroy.io/developer-tools/multi-layer-decoder)
- [URL Parser](https://phishdestroy.io/developer-tools/url-parser)

All tools: https://phishdestroy.io/developer-tools