Red Flags of a Scam Website: What to Spot Before You Pay

Red flags exist so you can stop in time

Every scam website is designed to get you to the checkout before you think too hard. So the useful question is not "how do I prove this site is fraudulent?" — which can take investigators weeks — but "are there enough warning signs here for me to walk away?" You do not need certainty. You need a short list of red flags reliable enough to protect your money.

This article is that list. It is organised by where the warning shows up: in the web address, on the page, in the reviews, at the checkout and in your gut. A single flag is worth noticing; two or three together is your cue to close the tab. If you want the flip side — the positive signals that a site is trustworthy — read our companion guide on how to check if a website is legit.

Red flags in the web address

The domain is where scammers most often give themselves away, because it is the one part of the site they cannot fully control the appearance of.

The name is almost, but not quite, right

Look hard at the exact spelling. Fraudsters register addresses that read correctly at a glance but are subtly wrong: a zero for an "o", an added word, an unexpected hyphen, or a familiar brand parked on a strange ending like .shop or .top. This is typosquatting, and it relies on you reading the word you expect. If the domain has extra bits bolted on — nike-outlet-uk-sale.com, hmrc-refund-portal.net — that is a flag on its own.

The site is brand new

Most scam shops are only days or weeks old. They spin up, run for a short window while the orders roll in, and vanish before the complaints and chargebacks catch up. A site that presents itself as an established, trusted retailer but was registered a fortnight ago is contradicting itself. Domain age is one of the strongest single signals you can check, which is why it has its own article.

You cannot find out who runs it

Legitimate businesses are traceable. If a site trades under a brand name but hides its owner behind privacy protection, lists no company registration, and offers no real address, ask why. There is nothing wrong with WHOIS privacy on a personal blog — but a shop asking for your card details should be willing to tell you who it is.

Red flags on the page

Once you are on the site, the design and copy leak clues about how much care — and how little accountability — went into it.

Manufactured urgency everywhere

Countdown timers, "sale ends in 6 minutes", "17 people are looking at this right now", stock counters ticking down as you watch. A real retailer runs the occasional sale; a scam site makes panic the entire experience. The point of all that urgency is to stop you doing the sensible thing — stepping back long enough to look properly. When a page is engineered to rush you, slow down deliberately.

Contact details that lead nowhere

Check for a complete postal address, a landline, and a contact email hosted on the company's own domain. Then test them, because scammers list details they never intend to answer. Drop the address into a mapping tool and see whether a real premises sits there. Try the phone number. A "UK retailer" reachable only through a web contact form, or via a free webmail address, is a serious warning.

Sloppy craft

Fraudsters build in a hurry and reuse other people's material. Watch for mismatched product photos that are obviously stock images, awkward or machine-translated English, inconsistent branding, and links in the menu or footer that go nowhere. One typo proves nothing. A pattern of carelessness across a site that is asking for money is telling.

Trust badges that are just pictures

"Verified", "100% Secure", "Trusted Shop" logos are trivially copied and pasted. A genuine trust seal or security certification links through to a live record on the issuer's own website. If clicking the badge does nothing, it is decoration.

A missing or hollow social presence

Real businesses leave footprints. An established retailer usually has social media accounts with a history — posts going back months or years, customers asking questions in the comments, replies from the brand. A scam shop often has none, or has thin accounts created the same week as the site, with a handful of posts and followers that look bought. Be especially wary when a site reached you through a slick social-media advert but has no genuine profile behind it: fraudsters buy ads to funnel shoppers to disposable stores, then let the store vanish while the advert keeps running elsewhere. A brand that spends on advertising but has no real community around it is worth a second look.

Red flags in the reviews

Reviews are the most manipulated signal online, so treat them with suspicion by default.

A manufactured reputation has a distinctive shape: a burst of five-star reviews all posted within a few days, written so alike they could share an author, gushing in a way real customers rarely are, and existing only on the seller's own site. Genuine feedback is uneven and scattered — it spans months, includes middling and negative comments, and turns up on platforms the seller does not control. These patterns are the classic markers of fake reviews. Always run a separate search for "[brand] reviews" and "[brand] scam" so you are reading what other buyers say off-site, not just the testimonials the shop chose to display.

Red flags at the checkout

The payment step is where a scam either takes your money irreversibly or exposes itself.

You can only pay by irreversible methods

This is arguably the biggest red flag of all. A legitimate retailer happily takes your card or a service such as PayPal, since it has nothing to fear from the buyer protection those routes carry. Scammers do the opposite, herding you towards money that cannot be recalled once sent: bank transfers, cryptocurrency, gift-card codes. If a checkout suddenly insists on bank transfer "to avoid card fees", or asks you to pay a named individual rather than a company, that is the moment to leave. Our guide to safe ways to pay online breaks down which methods protect you and which leave you with nothing.

The price is too good to be true

Deep discounts are bait. Designer items at a fraction of retail, sold-out electronics mysteriously in stock, luxury goods at pile-'em-high prices — these are designed to switch off your judgement. Compare against two or three other sellers. If the gap is enormous, the difference is what your card details are worth to a criminal.

Missing or copied policies

Before paying, check the returns, refund and delivery policies. Real ones are specific: timeframes, addresses, conditions. Scam sites either omit them, keep them vague, or paste in generic text lifted from a template. No clear way to get your money back is a warning in its own right.

A quick red-flag scorecard

Use this the next time a new site tempts you. Tick every flag you find; two or more means stop.

• [ ] The domain name is subtly misspelled or has extra words
• [ ] The site was registered very recently
• [ ] You cannot find out who owns or runs it
• [ ] The page is drowning in countdown timers and stock warnings
• [ ] Contact details are missing, fake, or a web form only
• [ ] Reviews are all five stars, all recent, all on-site
• [ ] The only payment options are bank transfer, crypto or gift cards
• [ ] Prices are dramatically lower than everywhere else
• [ ] There is no company registration or legal identity in the footer
• [ ] The whole thing simply feels off

That last point matters more than people admit. If something nags at you even when you cannot name it, respect the instinct — it is usually your brain noticing a pattern before you have consciously spotted it.

Before you go

The scorecard above is worth more than the article around it. Save it, screenshot it, or copy it somewhere you will actually look — because the moment you need it, you will be mid-purchase with a countdown timer telling you not to bother. Eventually the CheckAScam checker, still in development as we write this, should shoulder much of that scorecard for you; until then, the screenshot does the job.

And if you are reading this because the money has already gone: you are not foolish, you are outnumbered. These sites are built by professionals who run hundreds at a time, and the same polish that fooled you fools thousands of people every week. What matters now is speed. Contact your bank before you do anything else, then work through our guide to getting your money back, which sets out the disputes and reporting routes that genuinely produce refunds.