Online scams have got much more convincing over the past few years, and fake websites are one of the main ways people get caught out.
They don’t always look obviously dodgy anymore. In fact, they’re so good that some of them are really hard to distinguish from the real thing at a glance, which is why knowing what to watch out for is more important than ever. The good news is that once you know the signs, spotting a fake site takes about 30 seconds. Before you share any personal information or even make a new account on a site you’re not quite sure about, here’s what to keep your eyes peeled for.
Start with the web address before you do anything else.
The URL is the first thing to check, and most people skip straight past it. A fake site will often have an address that looks almost right, but isn’t quite. A scammer might register something like “amaz0n.co.uk” or “lloydsbannk.com” and build a convincing-looking page on top of it. If you’re not in the habit of glancing at the address bar, it’s easy to miss.
Look at the very beginning of the address, too. A legitimate site handling any kind of personal information will start with “https” rather than just “http”. That extra “s” means the connection between you and the site is encrypted, so anything you type in can’t be easily intercepted. If the address starts with just “http” and the site is asking for your details, close the tab.
The padlock icon means something important.
Most browsers show a small padlock symbol next to the web address when a site is using a secure connection. Give this a glance before you enter anything. No padlock, or a padlock with a warning symbol through it, is a sign that something isn’t right with the connection.
One thing to be aware of though is that a padlock doesn’t automatically mean the site itself is legitimate. It just means the connection is encrypted. Fraudsters can get security certificates too, so a padlock is a necessary thing to check but not the only thing. Think of it as one box to tick, rather than the final word on whether a site can be trusted.
Pop-ups and aggressive advertising are a big giveaway.
Legitimate websites do have adverts, that’s just the internet. However, there’s a difference between regular display advertising and the kind of aggressive, relentless pop-up behaviour that fake sites tend to have. If a site immediately bombards you with pop-up windows, flashing offers, or messages telling you that you’ve won something, that’s a strong signal to leave.
Clickbait headlines within the site itself are another tell. Things like “you’ve been selected” or “claim your free gift now” that appear before you’ve done anything at all. Real businesses don’t behave like that. If the site feels chaotic or desperate to get your attention in an intrusive way, trust that instinct and close it.
Check the contact and about pages before you trust anyone with your money.
This is one of the most useful checks and one of the most overlooked. Any genuine business or organisation will have an about page that tells you who they are, and a contact page with working details. Not just a form, but an actual email address and ideally a physical address too. Fake sites often skip this entirely or fill it with vague, unhelpful text that doesn’t really say anything.
If there’s a phone number listed, do a quick search on it to see whether it comes up connected to the organisation it claims to be. Scam sites often lift details from real businesses or just make things up. A few minutes checking whether the contact information is consistent with what they’re claiming to be can save you a lot of trouble.
Offers that look too generous are almost always a trap.
This one sounds obvious, but it catches people regularly because the offers are designed to create urgency. Free laptops, government grants available with one click, brand-name goods at 90% off, jobs paying extraordinary salaries with no experience required. The reason these offers exist on fake sites is that they work. People click because the offer feels real enough to actually have a look at.
The rule is straightforward. If something is being offered that you’d never expect to see available at that price or on those terms in real life, it isn’t. Scammers invest time in making the surrounding site look credible precisely because the offer itself is too good, and they need everything else to feel legitimate enough that you override your instincts. If you catch yourself thinking, “this seems too good to be true,” it is.
Spelling mistakes and odd phrasing throughout the site are red flags.
This one has got less reliable as scam sites have become more sophisticated, but you should still pay attention to it. Poor grammar, inconsistent spelling, and sentences that read as though they’ve been translated clumsily are all signs that the site wasn’t built by anyone with a stake in presenting a professional face. Real organisations care about how their website reads.
Look at the fine print and terms and conditions too if you can find them. Fake sites often either don’t have these at all or copy them badly from somewhere else, which can result in inconsistencies like the wrong company name appearing or terms that reference regulations from the wrong country entirely. It takes a minute to scroll through, and it’s often where the cracks show most clearly.
Search the site name separately before clicking through from an email or advert.
A lot of people land on fake websites by clicking a link in a phishing email or a dodgy advert, rather than by searching for something themselves. The safest habit is to search for the organisation directly in a browser, rather than clicking links you weren’t expecting. Even if the link in the email looks right, it can redirect you somewhere else entirely once you click it.
If you search for a company or service separately and the website you find matches what you expected, that’s a better sign than trusting a link someone sent you out of the blue. Banks, government departments, and delivery companies will not typically ask you to click a link to verify anything urgent. If you get a message like that, go to the official site directly rather than using whatever link you’ve been given.
Check whether the site has any legitimate reviews elsewhere.
A real business that’s been operating for any length of time will usually have some kind of footprint outside its own website. Reviews on Trustpilot, mentions in news articles, a social media presence that goes back more than a few weeks. Fake sites often have none of that, or they have reviews that look suspiciously similar to each other and were all posted around the same time.
Searching the site name along with words like “scam” or “review” is a quick way to see whether other people have flagged it as suspicious. Scam reporting sites and consumer forums often pick these things up fairly quickly after they appear. If nothing comes up at all for a site that claims to be a well-established business, that absence of history is itself a warning sign.
Trust your gut when something feels off.
This sounds vague, but it’s actually useful. Most people have a moment of hesitation when something doesn’t feel right about a website, and then they override it because the rest of the page looks fine, or the offer is tempting enough. That moment of hesitation shouldn’t be ignored.
If you find yourself thinking twice about whether to enter your bank details, or if something about the layout or the language or the urgency of the messaging is making you slightly uneasy, stop. Close the tab, search for the organisation directly through a browser, and start again. The worst that happens if your instinct was wrong is that you spend an extra minute finding the real site. The worst that happens if your instinct was right, and you ignored it, is considerably more expensive and stressful to sort out.
What to do if you think you’ve already fallen for one
It happens to careful people too, so there’s no point in self-blame. If you think you’ve entered your card details or banking information on a site that turned out to be fake, contact your bank immediately. Most banks have a dedicated fraud line and can freeze your card or flag suspicious activity quickly if you get to them fast enough. The sooner you call, the better your chances of limiting the damage.
If you entered a password, change it straight away on any account where you use the same one. Using the same password across multiple sites is common, and it’s what scammers count on. Once you’ve secured your accounts, it’s worth reporting the site to Action Fraud in the UK, which helps authorities track these operations and warn others.
