Learn how to check if a website is legit or a scam with 12 warning signs, from URL checks and HTTPS limits to contact info, prices, payment methods, and refund policies.
You find a website selling exactly what you have been looking for.
The price looks great. The website looks professional. There are product photos, customer reviews, a checkout page, and even a padlock in the browser.
So is the website legitimate?
Not necessarily.
Scammers can create websites that look surprisingly professional. Some copy the branding, product photos, and wording of legitimate businesses. Others create fake online stores that exist only long enough to collect payments and personal information.
That does not mean every unfamiliar website is dangerous. A new or small business can have a perfectly legitimate website.
The important thing is knowing how to check a website before you trust it.
Here are 12 warning signs and practical checks you can use. Many scam websites are reached through phishing messages, which we explain in our guide on what phishing is and how phishing scams work.
Start with the URL.
Scammers often create website addresses that look similar to the real thing. They may use extra words, unusual spelling, additional characters, or a different domain.
For example, a fake website might try to make its address look similar to a well-known company's official domain.
Do not look only at the website's logo or page design. Look at the actual address in your browser.
Pay particular attention to:
A familiar-looking name in a URL does not automatically mean the website belongs to that company.
You have probably heard that you should look for https before entering personal or payment information.
https
That is good security practice, but there is an important catch.
HTTPS does not prove that a website is legitimate.
The FTC specifically warns that scammers can use encrypted HTTPS connections too. HTTPS helps protect information while it travels between your browser and the website, but it does not tell you who operates the website or whether the business is trustworthy.
So treat HTTPS as one security feature, not proof that a website is genuine.
A legitimate business should normally provide some way for customers to contact it.
Look for:
Be cautious if the website only provides a contact form and gives you no useful information about who operates the business.
Also check whether the contact information makes sense.
For example, a website claiming to represent a major company but providing an unrelated email address deserves closer investigation.
Do not automatically trust a phone number or email address simply because it appears on the website.
One of the simplest checks is to search for the business independently.
Try searching the company or website name together with words such as:
The FTC recommends researching unfamiliar sellers and checking what other people say about their experiences.
Don't rely on one review website.
Look for patterns across several independent sources.
Also remember that reviews can be fake or misleading, so a page full of five-star ratings is not automatically proof that a business is legitimate.
An extremely low price can be tempting.
Maybe an expensive product is suddenly 70% or 80% cheaper than everywhere else.
Before you celebrate the bargain, ask why.
Scam websites often use unusually low prices to attract attention. The FTC has warned about fake shopping sites advertising expensive products at prices that are far below normal.
Compare the same product across several established retailers.
A discount does not automatically mean a scam. Legitimate businesses have sales too.
But an unbelievable price combined with other warning signs should make you stop.
Before buying anything from an unfamiliar website, read its policies.
Look for clear information about:
Be cautious if the policies are missing, extremely vague, copied from another website, or difficult to understand.
A legitimate online store should make its basic purchasing terms reasonably clear.
The FTC recommends checking delivery and refund policies before buying from an unfamiliar seller.
The payment options can tell you a lot about a website.
Be particularly cautious if a seller insists that you pay using methods that are difficult to reverse or dispute.
Examples include:
The FTC warns consumers to be especially careful when an online seller insists on payment methods that make it difficult to recover money after a problem.
If you have a choice, use a payment method that provides appropriate consumer protections.
Take a look around the website.
Does the wording feel natural?
Are there obvious spelling mistakes?
Do product descriptions suddenly change writing style?
Are company names inconsistent?
Are images strangely cropped or obviously copied?
One mistake does not prove that a website is fraudulent. Legitimate small businesses can have typos too.
But multiple inconsistencies can be useful warning signs.
You can also search a distinctive sentence from the website to see whether the same text appears on unrelated websites.
Spend a few minutes exploring the site.
Click through the important pages.
Ask yourself:
Sometimes a scam website looks convincing on its homepage but falls apart when you investigate the rest of the site.
That is why checking several pages is more useful than judging the homepage alone.
Don't assume a website is legitimate simply because you found it through a search engine, social media advertisement, email, or text message.
Scammers can use online advertising and search results to direct people toward fraudulent websites. The FTC has warned that misleading search results can impersonate legitimate businesses or services.
If a company is familiar to you, consider typing its official website address yourself rather than following an unexpected link.
The same rule applies to suspicious email and SMS messages.
If you received the website address through a suspicious message, you can first analyze the message with the Scamlify Email Scam Checker or Scamlify SMS Scam Checker.
Think carefully about the information a website is requesting.
A shopping website may reasonably need your name, shipping address, email, and payment information.
But be cautious if a website suddenly asks for information that seems unrelated to what you are doing.
Before creating an account or making a purchase, check the site's privacy policy and understand what information it collects and how it says that information is used.
The FTC recommends checking what personal information an online shopping site or app collects and reviewing its privacy policy or terms.
This is perhaps the most important lesson.
A scam website does not have to look terrible.
It can have:
None of these things alone proves that a website is legitimate.
Instead of asking:
"Does this website look real?"
ask:
"Can I independently verify who is behind this website?"
That is a much better question.
If you are about to purchase something from an unfamiliar website, use this quick process.
Look carefully for spelling changes, strange domains, and suspicious additions.
Search for the company name plus "review," "complaint," or "scam."
Check the same product on several established websites.
Check shipping, returns, refunds, and cancellation terms.
Make sure there is a reasonable way to contact the seller.
Be cautious if the seller insists on difficult-to-recover payment methods.
Remember that HTTPS protects the connection but does not prove the business is legitimate.
If a website is pressuring you to buy immediately, stop and investigate.
Yes.
These are two different questions.
A website can use HTTPS and have a secure connection while still being operated by a dishonest person.
Likewise, a website can be legitimate but have a poor design, a few spelling mistakes, or limited reviews.
That is why website legitimacy should be judged using multiple signals instead of one technical feature.
Think of HTTPS as one piece of the puzzle, not the entire puzzle.
Scamlify is designed to help people investigate suspicious online messages and scam indicators.
If you discovered the website through an email, you can use the Scamlify Email Scam Checker to analyze the message that sent you there.
If the website was sent to you by text, use the Scamlify SMS Scam Checker to examine the message.
If you received a suspicious email and want to inspect its technical information, the Scamlify Email Header Analyzer can provide another layer of analysis.
And if the website was reached through a QR code, the Scamlify QR Code Scam Checker can help you assess the suspicious QR-related content.
These tools are useful for checking warning signs, but they should not replace independent verification when money or sensitive information is involved.
Don't panic.
Start by keeping records of:
Contact the seller using contact information you can independently verify.
If you paid by card and something goes wrong, contact your card provider promptly and ask about the available dispute process.
The FTC recommends keeping purchase records and contacting your payment provider when appropriate.
If you gave the website sensitive account information, consider securing the affected account through its legitimate website or app.
Before trusting an unfamiliar website, ask:
Does the URL look correct?
Can I independently verify the company?
Does the company have credible contact information?
Are the prices realistic?
Are shipping and refund policies clear?
Does the site accept reasonable payment methods?
Are there independent reviews or complaints?
Does the website consistently identify the same company?
Does it ask for information that makes sense?
Did I reach the site through an unexpected message or suspicious advertisement?
If several answers concern you, stop before entering payment or personal information.
Check the website address, research the company, look for independent reviews and complaints, examine contact and refund information, compare prices, and review the payment methods. Don't rely on HTTPS alone.
Look for multiple warning signs such as a suspicious domain, unrealistic prices, missing contact information, unclear refund policies, unusual payment requests, copied content, pressure to buy, and inconsistent company information.
No. HTTPS means the connection is encrypted, but it does not prove that the website operator is trustworthy. Scammers can also use HTTPS.
Research the store name, check independent reviews and complaints, compare prices, read shipping and refund policies, verify contact information, and use an appropriate payment method with consumer protections.
Search the company or website name along with terms such as "review," "complaint," and "scam." Checking several independent sources can give you a better picture than relying on the website's own testimonials.
Yes. HTTPS does not guarantee that a website is legitimate. It protects the connection between your browser and the site, but scammers can use HTTPS too.
They can be. Extremely low prices can be used to attract shoppers to fraudulent websites, especially when expensive products are offered far below normal prices. Compare the price with several established sellers before buying.
Be cautious if an unfamiliar seller insists on gift cards, wire transfers, cryptocurrency, or other payment methods that make it difficult to recover your money.
First verify the website and seller. Check the domain, company information, policies, reputation, and payment options. If you cannot independently establish that the seller is legitimate, don't enter your payment information.
Yes. Design quality is not proof of legitimacy. A fraudulent website can copy branding, images, layouts, and other elements from legitimate businesses.
A website does not become legitimate simply because it looks professional.
Before buying something, entering personal information, creating an account, or signing in, take a few minutes to investigate.
Check the URL. Research the company. Read the policies. Look for independent information. Compare prices. Be careful with payment methods. And don't rely on HTTPS alone.
If a website came to you through a suspicious email, text message, or QR code, investigate the message that sent you there as well.
If you are specifically checking an online store before buying, read our guide on fake online shopping websites and the signs a store is a scam.
When something feels wrong, you do not have to rush.
Stop, verify, and check before you trust the site.