Chase login URL: the real address

Chase's real sign-in page is on secure.chase.com. If a link takes you anywhere else and asks for your Chase password, close it. We opened each address below on 9 November 2026.

Domains Chase uses

Not a complete list. Each address below can have subdomains in front of it (www., login.), and they are still Chase's.

• chase.com
• jpmorgan.com
• jpmorganchase.com

How to read the address

Look at the part between https:// and the first single /. Read it from the right. The real thing ends in chase.com or another domain listed below, with nothing but a dot before it.

• https://login.chase.com/… is Chase: it ends in .chase.com.
• https://chase.com.account-check.example/… is not: it ends in account-check.example, and Chase's name at the front is decoration.
• https://chase-secure-login.example/… is not: a hyphen makes a different domain, and anyone can register one.

Everything after the first / is chosen by whoever made the page, so …/chase.com/signin in the path proves nothing.

What fake Chase pages looked like

On 5 November 2026, PhishTank listed 29 live, verified phishing URLs that its volunteers labelled Chase.

• 100% used HTTPS. The padlock means the connection is encrypted, not that the site is Chase.
• 6.9% had "chase" in the hostname. Most fakes give no such clue, so the absence of Chase's name doesn't make a link safe either.
• 72.4% sat on services anyone can sign up to, such as website builders, file sharing and QR-code links, rather than on a domain the attacker registered.

Hostnames from the same list that use Chase's name without being Chase's, newest first. Dots are written as [.] so none of them is a working link.

• chase-acess[.]vercel[.]app
• chase[.]com[.]cobblestonesw[.]com

Report a fake Chase email or page

Forward the email to phishing@chase.com. If you shared details or lost money, call the number on the back of your card.

Source: Chase: Report fraud, checked 9 November 2026.

Lures to watch for

• Text messages about a "blocked card" or "suspicious Zelle payment" that link to a sign-in page are the usual lures. Open the Chase app instead.
• Chase also asks fraud victims to report to the FTC (identitytheft.gov) and the FBI (ic3.gov).

Questions

What is Chase's official login URL?

secure.chase.com (Signing in on www.chase.com takes you to secure.chase.com). A real Chase address ends in chase.com, jpmorgan.com, jpmorganchase.com, read from the right of the hostname.

How do I report a fake Chase email or website?

Forward the email to phishing@chase.com. If you shared details or lost money, call the number on the back of your card.

Do fake Chase sites use Chase's name in the address?

In PhishTank's list of live phishing URLs on 5 November 2026, 2 of the 29 URLs labelled Chase (6.9%) had the brand's name in the hostname, so most gave no such clue. 100% used HTTPS, so a padlock proves nothing.

How we checked

• Sign-in addresses: opened on 9 November 2026 and followed through every redirect to where the sign-in page loads.
• Phishing numbers: PhishTank's online-valid list, downloaded 5 November 2026. Only URLs its volunteers labelled Chase count, and many fakes are labelled "Other", so these are a sample. We didn't open any of them. Data shared under CC BY-SA 2.5; method as in our phishing URL statistics.
• Example hostnames: hostnames in the whole list that contain "chase" but aren't on Chase's domains, one per domain.

See also: official sign-in addresses of 15 brands.

Last updated: 9 November 2026, when the sign-in addresses were checked.