🌐

How to Spot Fake Websites

4 minute read

Check if a site is legitimate before entering your info.

Fake websites mimic real ones to steal your information or money. Here’s how to tell them apart.


Check the URL Carefully

The URL is the first and most important check.

Real vs Fake examples:

Looks Like Is It Real? Why?
amazon.com ✅ Yes Correct domain
amazon.com.shopping-deals.com ❌ No Amazon isn’t the actual domain
arnazon.com ❌ No “rn” looks like “m”
amazon-login.com ❌ No Real Amazon doesn’t use hyphens
amazon.co ⚠️ Maybe Different country domain—verify

How to read a URL:

https://www.amazon.com/gp/cart
        ↑
        This is the actual domain

Look at what comes before the first single slash (/). That’s the real domain. Everything after is just a page on that site.

Scammer trick: They put the real company name somewhere in a longer URL, hoping you won’t look closely.


The Padlock Isn’t Enough

The padlock (🔒) only means the connection is encrypted. It does not mean:

  • The site is legitimate
  • The company is real
  • Your information is safe

Scammers can get padlocks too. It’s free and easy.

Always check the actual URL, even if you see a padlock.


Signs of a Fake Website

Visual red flags:

  • Blurry or stretched logos
  • Spelling and grammar errors
  • Broken links, missing images
  • Design looks “off” compared to the real site
  • Unprofessional or inconsistent styling

Missing trust signals:

  • No contact information
  • No physical address
  • No phone number (or number doesn’t work)
  • No “About Us” or company information
  • Only email or contact form

Checkout red flags:

  • Only accepts wire transfer, gift cards, or crypto
  • Unusually low prices on everything
  • Constant pressure tactics (“Only 2 left!” “Sale ends in 5 minutes!”)
  • No clear return policy

How to Verify a Website

Method 1: Search for reviews

Search: "[site name]" + scam or "[site name]" + reviews

If others have been scammed, they’ve probably posted about it.

Method 2: Check the domain age

Very new domains (weeks or months old) are more suspicious.

A site claiming to be an established company but created last month? Red flag.

Method 3: Find the real site independently

Don’t click links in emails. Instead:

  • Google the company name
  • Go directly from search results
  • Or type the URL yourself if you know it

Method 4: Verify contact information

Call the phone number listed. Does a real business answer? Try the address on Google Maps. Does it look like a real business location?


If You’re on a Suspicious Site

  1. Don’t enter any personal information
  2. Don’t enter any payment information
  3. Close the tab
  4. Clear your browser history if you’re worried about tracking
  5. If you clicked from an email, report that email as phishing

If you already entered information: I think I was scammed →


Quick Summary

✓ Check the full URL, not just the padlock

✓ Look at what comes before the first slash

✓ Search for reviews and scam reports

✓ Verify by going directly to sites through Google

✓ If in doubt, don’t enter any information