Check the web address for the real company name

The easiest way to spot a fake website is to look at the address bar — the part that shows the web address, or URL. Scammers often use addresses that look almost like the real thing but have a small difference you might miss if you're not looking carefully.

For example, a fake PayPal site might be paypa1.com (with the number 1 instead of the letter l) or paypa-secure.com (with a dash added). The real PayPal address is just paypal.com. Before you enter any password or payment information, stop and read the address bar word by word. If you're not sure, type the company name directly into Google and click their official link instead of using a link from an email or text message.

Look for HTTPS and the lock icon

A real website that handles passwords or payment information will show HTTPS at the start of the address, not just HTTP. The "S" means the connection is encrypted — your information is scrambled so others cannot read it. You will also see a small lock icon next to the address.

This lock does not mean the website is trustworthy overall, only that the connection itself is secure. A scam site can have HTTPS too. But if a site asks for your password or credit card and does not have HTTPS, that is a red flag. Never enter sensitive information on a site without the lock icon.

Key Takeaways

  • Read the web address carefully word by word, because scammers use addresses that look almost identical to real ones with one letter or number changed.
  • Real websites that ask for passwords or payment information show HTTPS and a lock icon in the address bar.
  • Do not click links in emails or text messages — type the company name into Google and click the official result instead.
  • Check the "About Us" or contact page for a real address and phone number, not just an email form.
  • If a website pushes you to act right now or threatens consequences, it is probably a scam.

Search for the company name plus "scam" or "fake"

Before you enter any information on a website, spend 30 seconds searching Google for the company name plus the word "scam" or "fake." If the site is known to be fraudulent, other people will have reported it and you will see warnings in the search results. Type something like "Amazon scam" or "IRS fake website" and see what comes up.

You can also check sites like ScamAdviser.com or URLhaus, which track known fraudulent websites. These sites are not perfect — new scams appear every day — but they catch many of the common ones. If you find nothing but positive results, that does not may provide the site is real, but it is a good sign.

Look for contact information that is real

Real companies put their address, phone number, and customer service email on their website, usually in the footer or on an "About Us" or "Contact" page. Scam sites often have only an email form with no phone number or physical address. If you cannot find a way to call the company, that is suspicious.

Go further: call the phone number or look up the address on Google Maps. Does the address match a real office building? Does the phone number connect you to a real person or a working customer service line? Scammers sometimes list fake addresses or phone numbers that do not work. A real company will have a presence you can verify.

Watch for poor spelling, grammar, and design

Many scam websites are built quickly and cheaply. Look for obvious spelling mistakes, awkward sentences, or images that look blurry or poorly made. Real companies spend money on professional design and editing. If a website looks like it was thrown together in an afternoon, be cautious.

This is not a foolproof test — some scammers are careful about appearance — but combined with the other checks, it is useful. Pay special attention to official-looking pages that ask for sensitive information. A real bank or government agency will not ask you to enter passwords on a page with typos or broken formatting.

Be suspicious of pressure and threats

Scam websites often use language designed to make you panic and act without thinking. They might say your account will be closed, your refund will expire, or you will face legal trouble if you do not act right now. Real companies do not pressure you this way. They give you time to make decisions and do not threaten consequences for taking a few hours to think.

If a website is pushing you to enter your password, credit card, or personal information because of an urgent threat, stop. Contact the company directly using a phone number or address you find yourself, not one from the website. A real company will confirm whether the threat is real.

Check who owns the domain

Every website has an owner, and that information is public. You can look it up using a WHOIS lookup tool — search "WHOIS lookup" and you will find several free ones. Enter the web address and you will see the name and contact information of whoever registered the domain.

For a real company, the owner name should match the company name or the parent company. If the owner is hidden or uses a fake name, that is a warning sign. Some legitimate companies hide their information for privacy reasons, but scammers hide it to avoid being traced. Combined with other red flags, hidden ownership is worth noting.

Frequently Asked Questions

Is a website with HTTPS definitely safe?

No. HTTPS means the connection between you and the website is encrypted, but it does not mean the website itself is trustworthy. A scam site can have HTTPS. Use it as one check among several, not as proof that a site is real.

What should I do if I think I visited a scam website?

If you entered a password, change it immediately on the real website using a different device. If you entered credit card information, call your bank or card company right away. If you entered personal information like your Social Security number, consider placing a fraud alert with the credit bureaus. Report the fake website to the Federal Trade Commission at reportfraud.ftc.gov.

Can I trust a website just because it appears in Google search results?

No. Scammers pay for ads that appear at the top of search results, and they sometimes rank high for popular searches. Always check the address bar and the other signs in this guide, even for sites that appear high in Google results.

What if the website looks exactly like the real company's site?

Check the address bar first. Scammers sometimes copy the entire design of a real website. The address is the hardest thing to fake convincingly, so if the URL looks wrong, do not enter any information. Go to the real company's website by typing the address yourself or calling their customer service number.

Should I trust reviews on a website about itself?

No. Scam websites often post fake five-star reviews to look trustworthy. Look for reviews on independent sites like Google Reviews, Trustpilot, or the Better Business Bureau instead. Real customer feedback on third-party sites is much harder to fake.