How to Spot a Fake Website in 60 Seconds

Fake websites copy real brands to steal passwords and payment details. They can look convincing, but they almost always slip up somewhere. Use this checklist before you type anything sensitive.

1. Read the address bar slowly

The domain is the part right before the first single slash. A real bank might be bank.com, while a scam could be bank.com.secure-login.net or bannk.com. Look for misspellings, extra words, strange endings and extra hyphens. Only the part just before the final .com (or similar) identifies who owns the site.

2. Do not trust the padlock alone

The padlock only means the connection is encrypted. Scammers get certificates too. It does not prove the site is honest.

3. Check how you arrived

Be suspicious if you landed through an unexpected email, text message or ad. When in doubt, close the page and type the official address yourself, or use a bookmark you saved earlier.

4. Look for pressure and too-good deals

Countdown timers, "only 2 left" warnings, huge discounts and demands to act immediately are classic tactics. Real shops do run sales, but prices that are far below every other store are a warning sign.

5. Check the details at the bottom

Real businesses list a physical address, a working contact method, and clear refund and privacy pages. If those pages are missing, vague or copied from another site, be careful.

6. Test the payment options

Be wary if the site accepts only bank transfers, gift cards or cryptocurrency. Cards and well-known payment services give you the strongest chance of disputing a charge.

7. Search for reviews outside the site

Search the site's name together with the words "scam" or "reviews". Rely on independent sources rather than testimonials printed on the site itself.

8. Check the domain age

A free WHOIS lookup shows when a domain was registered. A shop claiming years of history on a domain created last month is a red flag.

If you already entered details

• Change the password on that account, and anywhere you reused it
• Contact your bank if you entered card details
• Turn on two-step verification
• Run a scan with your security software

Spending a minute on these checks is far easier than recovering a stolen account.