How to Spot a Fake or Fraudulent Website Before You Buy

Fake websites cost Americans billions of dollars each year. Scammers build sites that look exactly like a real retailer, government agency, or service — then steal your payment information or ship you counterfeit goods (or nothing at all).

The good news: most fake sites share the same red flags. Knowing what to look for takes 60 seconds and can save you from real financial harm.

Check 1: Look for HTTPS in the address bar

Legitimate websites use HTTPS (Hypertext Transfer Protocol Secure). In your browser's address bar, you should see "https://" before the website address, and usually a padlock icon (🔒).

HTTP (without the "s") means your connection is not encrypted. Never enter payment information on an HTTP site.

Important caveat: HTTPS alone does not mean a site is legitimate — scammers can and do get HTTPS certificates for fake sites. It is a minimum requirement, not a guarantee of safety.

Check 2: Look carefully at the URL (website address)

Scammers create web addresses that look almost identical to real ones: - amazon.com vs. amaz0n.com (zero instead of "o") - paypal.com vs. paypa1.com (number 1 instead of "l") - walmart.com vs. walmrt.com (missing letter) - medicare.gov vs. medicare-services.com (not a .gov address) - apple.com vs. apple-support-center.com (extra words added)

Before entering any information, look at the entire URL. Government sites always end in .gov. Financial institutions and major retailers always use their well-known main domain.

Check 3: Search for a real phone number and address

Legitimate businesses have a real address and phone number on their "Contact Us" page. Look for it. Then: - Search the phone number in Google — does it match the business? - Search the address — does it exist on Google Maps? - Is the phone number a real number (not a Google Voice or VoIP number in the 555- or 800- range that leads nowhere)?

Scam sites often have no phone number, a non-working number, or an address that turns out to be a mailbox store.

Check 4: Look at the "About Us" page

Legitimate businesses have a genuine About Us page with company history, names of leadership, and real information. Scam sites either have no About Us page, or one filled with vague, generic text with no specific company details.

Also look for a physical mailing address in the footer of the website. US businesses are generally required to disclose this.

Check 5: Search the company name + "reviews" or "scam"

Before buying from an unfamiliar site, search for "[company name] reviews" and "[company name] scam" in Google. Visit review sites like: - Better Business Bureau (bbb.org) — check complaint history - Trustpilot (trustpilot.com) — customer reviews - Sitejabber (sitejabber.com)

If other customers report non-delivery, counterfeit goods, or difficulty with refunds, that is a strong warning sign.

Check 6: Check the website's age (domain age)

New websites can be legitimate, but a scam site is often registered just days or weeks before it launches. You can check how old a website is:

1. 1Go to whois.domaintools.com.
2. 2Enter the website address.
3. 3Look for the "Registered" date.

A website selling popular products that was registered last week is suspicious. An established business usually has a domain registered for years.

Check 7: Look for too-good-to-be-true prices

If a site is offering iPhones for $89, Nike shoes for $15, or concert tickets at 80% off face value. It is almost certainly a scam. Prices a lot below market value are bait.

Real discounts are usually 10–40% off. If it seems impossibly cheap, it is.

What to do if you suspect a site is fake

• Do not enter any payment information, email address, or personal details.
• Close the browser tab.
• If you are looking for a real product or service, go directly to the official company website by typing their known address yourself (like amazon.com, walmart.com, target.com).
• Report the site to the FTC at reportfraud.ftc.gov.

If you already gave payment information to a suspicious site

Act quickly: 1. Call your bank or credit card company and report potential fraud. Ask them to watch for unauthorized charges or issue a new card number. 2. If you paid by gift card: report to the gift card company and the FTC — recovery is difficult but report it. 3. If you paid by wire transfer: contact your bank right away and also report to ic3.gov (FBI Internet Crime Complaint Center). 4. Check your credit report at annualcreditreport.com to watch for new accounts opened in your name.

Websites you can always trust (official sources)

When in doubt, go to the source: - Anything from the federal government: must be at a .gov domain - Medicare: medicare.gov only - Social Security: ssa.gov only - IRS: irs.gov only - Amazon: amazon.com only (not amazon.shop, amazon-store.com, etc.)