How to Spot a Fake Website
Fake websites copy the look of real shops, banks and delivery services to trick people into giving away money or details. They can look convincing, so no single check is perfect. The good news is that a handful of habits catches most of them.
Start with the address
The web address in your browser is your first clue. Scammers often use addresses that resemble the real one with small changes: an extra word, a swapped letter, a hyphen, or an unusual ending. Read the address slowly, character by character. If you reached the page through a message or advert, do not trust the display text in the message. Instead, type the known address yourself or use a bookmark you saved earlier.
The padlock is not a guarantee
A padlock symbol means the connection is encrypted, not that the site is honest. Fake sites can have one too. Treat it as a minimum requirement, not proof of safety.
Red flags in the content
- Prices that seem impossible. Huge discounts on popular items, especially with countdown timers, are a classic lure.
- Pressure. Messages like “only two left” or “pay in the next ten minutes”.
- Poor language or odd layout. Not every fake looks sloppy, but spelling mistakes and mismatched images are common.
- Missing or vague contact details. No real address, no phone number, only a form.
- Missing policies. Absent or copied returns, privacy and terms pages.
Payment clues
Be cautious if a site only accepts bank transfers to a personal account, gift cards or unusual payment routes. Paying by methods that offer some dispute protection is generally safer, although the level of protection depends on your provider and country, so check their terms.
Do a quick background check
- Search for the site name along with words like “reviews” or “scam”, and read a few sources.
- Look for how long the business seems to have existed. A brand-new site claiming years of history deserves doubt.
- Check that social media accounts link back to the same site and show genuine activity.
- For well-known brands, find the official address through a trusted source and compare it.
Watch out for login pages
Fake sign-in pages are designed to capture passwords. If an email says your account has a problem, do not click the link inside. Open a fresh browser window and go to the service directly. Using a password manager can help, because it normally will not fill in your details on an address it does not recognise.
What to do if you entered details
- Change the password on that account and on any other that used the same one.
- Contact your bank or card provider promptly if you shared payment information.
- Turn on two-step verification where available.
- Keep screenshots and emails in case you need to report it.
- Report the site to the relevant consumer or cybercrime authority in your country.
Teach the household
Scams hit people of every age, so it helps to talk about them openly at home. Agree a simple family rule: before anyone buys from an unfamiliar shop or enters a password after clicking a link, they ask a second person or look the business up first. Nobody should feel embarrassed to check. Sharing near-misses, such as a suspicious message you almost clicked, makes everyone more alert than any lecture would.
Slowing down is the single best defence. Fake sites rely on hurry and excitement. If something feels rushed or too good to be true, pause, verify through another route, and walk away if you cannot confirm it.