Yes, in the sense that matters most: Linktree is a real, long-running company, not a scam operation, and using it to host your own bio links doesn't expose you to anything unusual. The safety question that actually deserves an answer is different, and it's about the shared linktr.ee domain rather than the company: because anyone can spin up a free Linktree page in minutes, that same domain has also been used by scammers to host phishing links and, in at least one documented case, a counterfeit-product redirect network. The company isn't the threat. What someone else built next to you on the same domain can be.
Why a shared domain carries other people's risk
Every free Linktree page lives under the same linktr.ee domain, which is efficient for Linktree and useful for anyone who wants a page live in minutes, but it also means the domain's overall reputation is shared across everyone using it. Security researchers have documented phishing campaigns that abuse Linktree's redirect step specifically because a linktr.ee link looks more trustworthy to a wary reader than a raw unfamiliar URL, and separate reporting has traced counterfeit-goods networks routing traffic through Linktree pages the same way. None of that requires a flaw in Linktree's own code. It only requires that the domain is open to anyone, which is the same tradeoff every free shared-domain tool makes.
One practical downstream effect: some platforms, TikTok among them, have at points flagged linktr.ee links as an "unsafe URL" warning shown to the visitor before they continue, purely because of that shared reputation, not because of anything about your specific page.
What this does and doesn't mean for your own page
If you're using Linktree the normal way, building a page of your own real links, you aren't doing anything that puts your account or your visitors meaningfully at risk. The exposure runs the other direction: a visitor clicking a linktr.ee link from someone else has slightly less certainty about where it leads than clicking a link on a domain used only by one person or brand, since they can't tell your page apart from a stranger's by the domain alone. A custom domain is the direct fix for that specific problem, since a domain only you control carries only your own history rather than the accumulated reputation of every account that has ever used the shared one.
How to check any link before you trust it
Whether the domain is linktr.ee or something else, the same basic check applies before you click through or share a link further: see where it actually leads before you commit to it. Raydar's redirect checker follows every hop a shortened or bio link takes and shows the final destination without you having to visit it first, and the link decoder strips a URL down to its real parameters if something about the parameters themselves looks off. Neither tool is specific to Linktree; both work on any link you're unsure about.
The honest bottom line
Linktree the company is safe to build on. Linktree the shared domain carries some of the same baseline risk every free, open-signup, shared-domain service carries, and that risk shows up occasionally as phishing links or platform warnings that have nothing to do with your own page. If that shared-reputation exposure bothers you, either for your own links or for how visitors perceive them, a platform where you can put links on your own domain removes it entirely. How Raydar compares on that and other points is covered separately.