How to Recognise a Fake Website Before You Type Anything

Fake websites copy the look of a real shop or bank almost perfectly, but they nearly always slip up in the web address, the contact details, or the payment options. Once you know where to look, you can spot most of them in under a minute. None of this requires special software, and you do not need to be technical to do it well.

Scammers build these pages to take your card number, your password, or a one-off payment for goods that never arrive. They get you there through an email, a text message, a social media advert, or a search result that looks ordinary. The good news is that the warning signs are consistent, and the same handful of checks catches the great majority of them.

Start with the web address, not the page

The web address (the line at the very top of the screen that begins with https) is the single most reliable clue. A real company uses a clean, predictable address such as amazon.co.uk or paypal.com. A fake one adds extra words, swaps letters, or tacks the brand name onto a long string, for example amazon-security-update.com or paypa1.com with the number one standing in for the letter L.

Read the address from right to left up to the first single slash. The part just before that slash is the real owner of the site. In shop.example.com, the owner is example.com, not shop. Scammers exploit this by writing something like amazon.com.verify-account.ru, where the true owner is verify-account.ru and Amazon is only there to fool your eye.

Common tricks and what they really mean

The table below lists the signs that come up again and again on fake sites. You will not see all of them on every scam, but two or three together is a clear signal to stop and walk away.

One sign on its own is not always proof. A small specialist shop may have no phone line, and a real sale may carry a timer. It is the combination that matters, so weigh the signs together rather than condemning a site for a single quirk.

Check the contact and company details

Scroll right to the bottom of any shopping page. A real business lists a company name, a postal address, and usually a registration number. Copy the company name and search for it separately, along with the word reviews. If nothing comes up, or only angry warnings from other shoppers come up, that tells you what you need to know.

Phone the number if there is one. A line that rings out forever, goes to a full voicemail, or connects to a completely different business is a red flag. You can also paste the web address into a free checker such as the one at Google Safe Browsing, or look the site up on a review site like Trustpilot, though remember that very new scam sites may simply have no reviews yet.

How you arrived matters as much as the site

Most people never go looking for a fake site. They are sent there. A text claiming a parcel needs a small redelivery fee, an email warning that your account will close today, a message that you have won a prize: all of these carry a link, and the link is the trap. Treat any unexpected link as guilty until proven innocent.

Never reach a bank or a shop by clicking a link in a message. Instead, open your browser and type the address yourself, or use an app you already trust on your phone. If your bank really needs you, the proper app or your own saved bookmark will show the same alert. This one habit defeats a large share of scams on its own.

Adverts on social media deserve the same care. A glossy video selling designer goods at a fraction of the price often points to a throwaway site that takes your money and disappears. Before you buy, search the brand name and find the official shop directly, rather than trusting the link in the advert.

A one-minute routine before you pay

Run through these checks in order every time you are about to enter card or login details on a site you do not already use regularly. It takes about a minute and becomes second nature quickly.

1. Read the full web address slowly. Does it match the real company exactly, with no extra words or swapped letters?
2. Did you arrive by clicking a link in a message or advert? If so, leave and reach the site yourself by typing the address.
3. Scroll to the bottom and look for a real company name, address, and contact number.
4. Check the price against one or two other shops. A wild discount is a warning, not a win.
5. Look at the payment options. If card and PayPal are missing and only transfer, gift card, or crypto are offered, stop.
6. Search the company name plus the word reviews in a separate tab.

If anything fails, close the page. You lose nothing by walking away from a site you were unsure about, and you can always reach the real company another way.

What to do if you have already entered details

Act quickly rather than feeling embarrassed, because speed limits the damage. If you typed a card number, phone the number on the back of your card and tell them you may have been scammed. They can freeze the card and watch for odd payments, and card payments are often refundable when you report them promptly.

If you typed a password that you also use elsewhere, change it on every site where you use it, starting with your email. Your email is the master key to your other accounts, so protect it first and turn on two-step verification if you have not already. Then report the fake site so others are warned: in the UK you can forward scam texts to 7726 and report fraud at Action Fraud, and most browsers let you report a dangerous page directly.

Fake emails and texts: spotting the bait

Because most fake sites reach you through a message, learning to read the message itself stops you before you ever load the page. Look at who really sent it. On a phone, tap the sender's name to reveal the full email address or number behind it. A bank email arriving from a random address ending in a free webmail domain, or a parcel text from an ordinary mobile number, is a clear warning that the message is not what it claims.

Watch the greeting and the tone as well. Real companies usually address you by the name on your account, while scams open with a vague Dear Customer or Dear User because they do not know who you are. Threats to close your account today, demands for an immediate small payment, and promises of a refund you never expected are all designed to rush you. A calm, suspicious pause defeats almost all of them.

Hover over a link before tapping it, or press and hold it on a phone, to preview where it really leads. If the preview address has nothing to do with the company named in the message, do not tap it. Even when the link looks fine, the safest move is the same one as always: ignore it and reach the company yourself through their proper app or your own bookmark.