How to Identify Fake Websites and Scams
Fake websites steal personal information, financial details, and login credentials. Learning to spot them is one of the most important digital skills you can develop.
Overview
Scammers create convincing copies of legitimate websites to trick you into entering sensitive information. They use urgency, fear, and too-good-to-be-true offers as bait.
Step 1: Check the URL
The website address is the first and most important thing to verify.
Examine the Domain Name
- Look at the domain carefully — scammers use similar spellings
- Examples: amaz0n.com, paypa1.com, micros0ft-support.com
- Check for extra words: amazon-verify.com, paypal-secure.net
- The real domain is always just before .com/.co.uk/.org
- Hover over links before clicking to see the actual URL
Check for HTTPS
- Look for the padlock icon in the browser address bar
- URL should start with https:// (not just http://)
- Click the padlock to view the security certificate
- Check that the certificate matches the website name
- Note: HTTPS alone doesn't guarantee legitimacy — scammers use it too
Verify the Domain Age
- Visit whois.domaintools.com
- Enter the suspicious domain name
- Check 'Creation Date' — very new domains are suspicious
- Legitimate businesses have domains registered for years
- Also check the registrant country matches the business
Bookmark important sites like your bank, email, and shopping sites. Always use bookmarks instead of clicking links in emails.
Step 2: Examine the Content
Fake websites often have telltale signs in their content.
Look for Red Flags
- Poor spelling and grammar throughout the site
- Low-quality or stolen images (reverse image search to check)
- Missing or fake contact information
- No physical address or phone number
- Generic 'About Us' page with no real company details
Check for Pressure Tactics
- 'Limited time offer — act now!' with countdown timers
- 'Your account will be suspended unless...'
- Prices that seem too good to be true (80-90% discounts)
- Requests for unusual payment methods (gift cards, wire transfer, crypto)
- Pop-ups that won't close or claim your device is infected
Legitimate companies never ask you to pay with gift cards or cryptocurrency. This is always a scam.
Verify Contact Details
- Call the phone number listed — does someone answer professionally?
- Email the contact address — does the domain match the website?
- Search the physical address on Google Maps
- Check for a Companies House listing if UK-based
- Look for real social media presence with engagement history
Step 3: Use Verification Tools
Free tools can help verify website legitimacy.
Check Reviews and Reports
- Search '[website name] reviews' or '[website name] scam'
- Check Trustpilot, Google Reviews, and social media
- Visit ScamAdviser.com for automated trust scores
- Check Action Fraud (actionfraud.police.uk) for reported scams
- Look for the website on Which? scam alerts
Protect Yourself Going Forward
- Install a browser extension like uBlock Origin
- Enable your browser's built-in phishing protection
- Use a password manager — it won't auto-fill on fake sites
- Never enter sensitive info from an email link — go directly to the site
- Report fake websites to Action Fraud and your browser vendor
Need Professional Help?
Our engineers provide expert assistance with setup, troubleshooting, and ongoing support for businesses and individuals across Cornwall.