Fake websites are everywhere: copycat online stores selling items that never arrive, fake bank login pages that steal passwords, bogus delivery fee pages and phony tech support sites. Criminals now use AI to create convincing designs, product photos and text in minutes, so a site looking professional proves nothing. This guide explains twelve warning signs of a fake website, free tools to check any site and what to do if you have already been tricked.
The 12 warning signs of a fake website
| Warning sign | What to look for |
|---|---|
| 1. Odd domain name | Misspellings, extra words, unusual endings like .shop or .top for a big brand |
| 2. Prices too good to be true | Designer goods or electronics at 70 to 90 percent off |
| 3. Very new domain | Registered only weeks or months ago |
| 4. No real contact details | No address, only a web form or a free email address |
| 5. Unusual payment methods | Wire transfer, gift cards, crypto, Zelle only |
| 6. Pressure tactics | Countdown timers, only 2 left, closing down sale |
| 7. Poor grammar or copied text | Strange wording, other brands’ names left in the text |
| 8. Missing or fake reviews | No reviews online, or only perfect reviews on the site |
| 9. Copied or stolen images | Product photos that appear on many other sites |
| 10. Strange return policy | No returns, or returns to an overseas address at your cost |
| 11. Login page from a link | You arrived from an email or text asking you to log in |
| 12. Browser or antivirus warnings | Chrome Safe Browsing or your security software flags it |
1. Read the domain name carefully
Scammers register names that look almost right: amaz0n-deals.com, paypa1-secure.net or yourbank-verify.com. Read the address bar letter by letter. The real domain is the part just before the first single slash, for example amazon.com in www.amazon.com/deals. A name like amazon.com.deals-shop.net actually belongs to deals-shop.net.
2. Do not trust the padlock alone
The padlock or https only means the connection is encrypted. Most fake sites now have https too, so it does not prove a site is legitimate.
3. Check how old the domain is
Use a free WHOIS lookup such as lookup.icann.org to see when the domain was created. A store claiming 20 years in business with a domain registered last month is lying.
4. Look for real contact information
Legitimate businesses list a physical address, phone number and company details. Search the address on a map. If it is a residential house, an empty lot or appears on many other suspicious sites, be careful.
5. Check how you can pay
Real stores accept credit cards and trusted services like PayPal, which offer buyer protection. If a site only accepts bank transfer, Zelle, gift cards or cryptocurrency, those methods are almost impossible to reverse, which is exactly why scammers prefer them.
6. Search for reviews outside the site
Search the website name plus the words scam, reviews or complaints. Check Trustpilot, Reddit and consumer protection sites. Remember that some scam sites post fake reviews about themselves.
Free tools to check a website
| Tool | What it does |
|---|---|
| Google Safe Browsing site status | Checks if Google flagged a site as dangerous |
| ICANN Lookup | Shows domain age and registrar |
| Scam detector or website checker tools | Gives a trust score based on many signals |
| VirusTotal URL scan | Checks a link against many security engines |
| Google reverse image search | Shows whether product photos are stolen |
Frequently asked questions
Can a fake website have https?
Yes. Most do. Https only means encrypted, not trustworthy.
How do I report a fake website?
Report it to Google Safe Browsing, your country’s consumer protection or fraud reporting service and the brand being impersonated.
Common types of fake websites
Fake online stores
These sites advertise on social media with amazing deals on shoes, electronics, furniture or clothing. You pay, and either nothing arrives or you receive a cheap knockoff. They often disappear after a few weeks and reappear under a new name.
Phishing login pages
Fake bank, email, streaming or social media login pages steal your username and password. You usually reach them through a text or email warning that your account is locked, a payment failed or you need to verify your details.
Fake delivery and toll payment pages
Texts claim a parcel could not be delivered or you owe a small toll fee. The link leads to a page asking for card details to pay a small amount. The real goal is to steal your card information.
Fake tech support sites
Pop ups claim your computer is infected and show a phone number to call. The scammers then ask for remote access and payment.
Fake investment and crypto platforms
These sites show impressive fake profits to persuade you to deposit more. Withdrawals are blocked, or you are told to pay a fee to unlock your money.
Fake government and visa sites
Lookalike sites charge extra fees for passports, visas, tax refunds or licences that are free or cheaper on the official government site.
How to check a link before clicking
- Hover over it on a computer to see the real address in the bottom corner.
- Long press on a phone to preview the link without opening it.
- Do not trust shortened links from unknown senders.
- Go directly to the official site by typing the address or using the official app.
- Use a link scanner such as VirusTotal for anything suspicious.
What to do if you entered details on a fake website
| What you shared | What to do immediately |
|---|---|
| Card details | Call your bank, freeze or cancel the card, dispute any charges |
| Bank login | Call your bank’s fraud line and change your password from the official app |
| Email or social password | Change the password, turn on two-factor authentication, log out other sessions |
| Same password on other sites | Change it everywhere you reused it |
| Personal ID details | Consider a credit freeze and monitor your credit reports |
| Downloaded a file | Disconnect from the internet and run a full antivirus scan |
Act within minutes or hours if possible. Banks can often block pending fraudulent charges if you call quickly.
How to shop safely online
- Use well-known stores or marketplaces with buyer protection.
- Pay with a credit card or PayPal, which make disputes easier.
- Use virtual card numbers if your bank offers them.
- Keep screenshots of orders, product pages and conversations.
- Be extra cautious with social media ads for unknown stores.
- Check the returns policy before buying.
Real examples
The sneaker deal. Tina saw an Instagram ad for limited edition sneakers at 75 percent off. The domain was registered three weeks earlier and the address was a parking lot. She skipped it, and a week later the site had vanished.
The parcel text. Ben got a text saying a parcel needed a small redelivery fee. The link went to a site with a misspelled courier name. He deleted the text and checked his real deliveries in the courier’s official app.
The bank warning. Asha clicked an email link saying her bank account was locked. The page looked real, but the address was a long string ending in a strange domain. She closed it, opened her bank’s app directly and found no problem with her account.
How AI makes fake websites harder to spot
In the past, scam sites were often full of spelling mistakes and blurry images. Today, AI tools let criminals generate polished product descriptions, realistic photos, chat support bots and even fake customer reviews in minutes. That means you should rely less on how a site looks and more on facts you can verify: the domain age, the company’s registration, independent reviews and safe payment options. A good habit is to search for the business name on its own, not just the website, and see if a real company with a long history appears.
Browser settings that help
- In Chrome, turn on Enhanced protection under Settings, Privacy and security, Security.
- Keep your browser and operating system up to date.
- Use a password manager, which will not autofill your password on a lookalike domain, a useful warning sign.
- Block pop ups and avoid installing unknown extensions.
- Consider a reputable security app with web protection on phones and computers.
Quick 30-second check
Before you enter a card number or password, ask yourself: Did I type this address myself or come from a trusted link? Does the domain match the brand exactly? Is the deal believable? Can I pay with a protected method? If any answer is no, stop and verify.
Teaching older relatives and children this simple check is one of the most effective ways to protect your whole family, because scammers often target people who shop or bank online less often. Save this guide and share it with them.
The bottom line
To spot a fake website, read the domain carefully, distrust unrealistic prices, check domain age and reviews and only pay with protected methods. When in doubt, type the company’s address yourself instead of clicking links. For more protection, learn how to create a strong password and how to recover a hacked Facebook account.
3 thoughts on “How to Spot a Fake Website: 12 Warning Signs”