How to tell if a website is trying to deceive you
A scam website looks designed to trick you into sending money, sharing passwords, or handing over personal details like your Social Security number. The difference between a real business site and a fake one often comes down to small details: how the URL is spelled, whether the site uses HTTPS encryption, what happens when you try to contact them, and whether their claims match what you can verify elsewhere.
You can check several things right now, on any website you're unsure about. None of them require special software or technical knowledge. Start with the URL itself, then move to what the site is asking for, then look for ways to verify who actually runs it.
Key Takeaways
- Check the URL in your browser's address bar for misspellings or unusual domains — scammers often use URLs that look similar to real ones but with one letter changed.
- Look for HTTPS and a padlock icon in the address bar, which means the connection is encrypted, though this alone does not prove the site is legitimate.
- Search the company name plus the word "scam" or "complaint" in Google to see if other people have reported problems with that website.
- Verify contact information by calling the phone number or visiting the physical address independently — do not use contact details from the suspicious website itself.
- Be cautious of sites that pressure you to act fast, ask for payment upfront before delivering a service, or request passwords or Social Security numbers without a clear reason.
Check the web address for red flags
The URL is the first place to look. Scammers often register domains that are one or two letters off from the real thing. Amazon becomes "amaz0n.com" (with a zero instead of the letter O). PayPal becomes "paypa1.com" (with the number 1 instead of the letter L). These differences are small enough that you might miss them if you're moving fast.
Look at the address bar, not the page itself. Scammers can make the page look identical to the real site, but they cannot change what appears in your browser's address bar. Type the company name into Google and click the official link from the search results, rather than clicking a link from an email or text message. This way you know you're on the real domain.
Also notice the domain extension. Real banks and major retailers use .com, .org, or .gov. If you're looking at a site claiming to be from your bank and the URL ends in .tk or .xyz or something unusual, that's a sign the site is not official.
Look for HTTPS and understand what it means
HTTPS means the connection between your browser and the website is encrypted — nobody listening in on your internet connection can see what you're typing. You'll see a padlock icon next to the URL in your address bar when a site uses HTTPS. This is a good sign, but it's not a complete may provide the site is legitimate.
Here's why: HTTPS is cheap and easy to set up. A scammer can get an HTTPS certificate just as easily as a real business can. So a padlock icon means the connection is secure, but it does not mean the person running the site is who they claim to be. Think of it like a locked door — the lock works, but it could be locking you into a room with a thief.
If a site is asking for your credit card, password, or Social Security number and does not have HTTPS, do not enter that information. But if it does have HTTPS, still check the other warning signs on this page before you trust it.
Search for complaints and reviews about the website
Open a new browser tab and search for the company name plus the word "scam" or "complaint". If the site is a known scam, you'll likely find forum posts, Reddit threads, or complaints on sites like the Better Business Bureau or Trustpilot. Real companies sometimes have complaints too, but scams tend to have patterns — multiple people reporting the same problem, like money taken and no service delivered, or personal information stolen.
Also search for the company name alone and see what comes up. If it's a real business, you should find their official website, news articles about them, or their social media accounts. If you find almost nothing except the site itself, that's suspicious.
Be aware that some scammers post fake positive reviews on their own sites or on review platforms. Look for reviews on independent sites like Trustpilot, Google Reviews, or the Better Business Bureau rather than reviews hosted on the company's own website. If all the reviews are five stars and use generic language like "great service," that can be a sign they're fake.
Verify contact information independently
If the site lists a phone number or physical address, verify it yourself. Do not call the number listed on the suspicious website — instead, search for the company name in Google and call the number from the official website or a directory. If the site claims to be from your bank, call the number on the back of your bank card.
For a physical address, use Google Maps to see if a business actually exists at that location. Some scammers list real addresses of real businesses to seem legitimate, so also check whether the address matches what you find on the company's official website or social media.
Try sending an email to the contact address and see how long it takes to get a response. Real businesses usually respond within one to two business days. If you get an automated response that does not address your specific question, or no response at all after a week, that's a warning sign.
Watch for pressure tactics and unusual payment requests
Scam sites often create artificial urgency. They tell you the offer expires today, or that you need to act right now or you'll miss out. Real businesses do run sales and limited offers, but they do not usually pressure you to decide in the next hour.
Be cautious of sites that ask you to pay upfront before they deliver a service — especially if they ask for wire transfer, gift cards, or cryptocurrency. These payment methods are hard or impossible to reverse if something goes wrong. Real companies usually take credit cards, which offer buyer protection.
Also be suspicious if a site asks for your password, Social Security number, or banking details without a clear reason. Your bank will never ask for your password via email or a website form. If you're buying something online, you should only need to provide a shipping address and payment information, not your Social Security number.
Check for poor spelling, grammar, and design
Many scam sites are built quickly and on a budget. Look for spelling mistakes, awkward phrasing, or images that look low-quality or stolen from other websites. Real businesses usually have professional copywriters and designers, so a site full of typos is a red flag.
That said, some scammers put effort into making their sites look polished, so good design alone does not mean a site is legitimate. Use this as one signal among several, not as your only check.
Frequently Asked Questions
Is a website with a padlock icon always safe?
No. The padlock means your connection is encrypted, but it does not prove the site is legitimate. Scammers can get HTTPS certificates. Always check the URL, search for complaints, and verify contact information before trusting a site, even if it has a padlock.
What should I do if I already gave a scam website my credit card number?
Contact your credit card company immediately and report the charge as fraudulent. They can cancel the card and issue a new one. Most credit cards have fraud protection, so you likely will not be responsible for unauthorized charges if you report them quickly.
Can I trust a website just because it appears in Google search results?
Not completely. Scammers can pay for ads or use search engine optimization tricks to appear high in results. Click on the official website link (usually marked "Official Website" or at the top of results), and verify the URL matches what you expect before entering any information.
What if a website looks exactly like a real company's site?
Check the URL carefully — scammers often use slightly misspelled domains. Call the real company using a phone number you find independently, not from the website. Ask them directly whether that website is theirs. They can tell you immediately.
Are there tools that can check if a website is a scam?
Some browser extensions and websites claim to check sites for you, but they are not foolproof. The manual checks in this guide — verifying the URL, searching for complaints, and checking contact information — are more reliable than relying on any single tool.