How to Recognise a Scam Website

There is no single tell that unmasks a fraudulent website, and anyone who promises you one is selling something. What actually works is a short sequence of small checks, none of which takes long, that together build a picture. A genuine business will pass nearly all of them without trying; a scam usually trips over two or three. Learn the sequence once and it becomes a reflex you run on any unfamiliar page.

Read the web address like an inspector

Fraudsters lean hard on the fact that most of us glance at a link rather than read it. Slow down and look at the domain properly — the part just before the first single slash. Watch for a well-known brand pushed into a subdomain (apple.secure-login.co is not Apple), for a swapped or dropped letter that your eye fills in automatically, and for an odd top-level ending such as .shop or .top where you would expect .co.uk or .com. Deliberately look-alike addresses are common enough to have a name — typosquatting — and they are designed to survive exactly the quick glance most people give them.

Find out how old the site is, and who runs it

A site claiming to be a long-established retailer that was actually registered a fortnight ago is telling on itself. You can look up a domain's registration date through a public WHOIS record, and a very recent one on a shop promising deep discounts deserves real suspicion. A new address is not, by itself, evidence of a scam — every honest business has to launch at some point — but a freshly registered domain sitting beside other warning signs is a strong pattern. We go deeper into why a website's age is such a reliable signal, including how scammers try to disguise a young site behind an aged domain with no matching history.

Do not let the padlock reassure you

The little padlock beside the address only certifies that traffic between your browser and the server is encrypted. It says nothing about whether the people behind the server are honest, and it is trivially cheap for a criminal to obtain. Treat an SSL certificate as basic hygiene rather than a badge of trust; its absence is a red flag, but its presence proves almost nothing. If that surprises you, our piece on what HTTPS really tells you unpacks the myth in full.

Weigh the reviews, and where they live

Testimonials sitting on the site itself are worth very little, because the site owner writes or buys them. What counts is independent reputation: search the shop's name alongside words like "review" or "scam" and read what turns up on forums, social media and established review platforms. Be alert to fake reviews too — a wall of five-star entries all posted in the same week, in oddly similar language, is a manufactured reputation, not an earned one. Genuine feedback is messy, spread over time, and includes the occasional complaint handled well.

Notice the pressure, and the payment

Manufactured urgency is a scammer's favourite lever: a countdown timer, a "only two left" banner, a discount that supposedly expires while you read. Real shops rarely need to rush you, and a page engineered to make you act before you think is a page worth distrusting on principle. Look, too, at how it wants to be paid. A site steering you away from a card and towards a bank transfer, cryptocurrency or gift-card codes has usually made a decision about you, because those methods are the hardest to claw back. Our safe ways to pay guide explains why the payment method is one of your strongest defences.

A two-minute routine you can repeat

When a site is unfamiliar and money is about to change hands, run these steps in order. Any one failure is a reason to slow down; two or more is usually your answer.

1. Read the domain aloud and confirm it is spelled exactly as the real brand would spell it.
2. Check the registration date and look up who owns it.
3. Search the name off-site for independent reviews and scam reports.
4. Find a real business identity — trading name, address and a contact route that answers.
5. Confirm you can pay with a card, and refuse any push towards an irreversible method.

None of this asks you to be technical. It asks you to look on purpose rather than on autopilot, which is precisely the instinct fraudsters are betting you will skip. For a longer worked example, the article on checking whether a website is legit walks the same ground in more depth, and the clearest red flags of a scam website groups the warning signs so you can act fast. If you want to understand what a fake shop looks like from the builder's side, we have taken apart how scam stores are assembled as well.

Where our checker fits

Much of what you have just read is what an automated tool can gather quickly — a domain's age, its ownership, its track record and the technical fingerprints of a throwaway site. The CheckAScam website checker being built now is meant to do exactly that legwork and hand you a plain summary; the signals it weighs, and how, are documented on our how we score page. The tool is still in development, and even finished it will only ever be a fast second opinion — the decision to read the address and refuse the rushed payment stays with you.