Know Phishing

How to Tell if a Website or Online Store Is Legitimate

Fake websites can look remarkably convincing. Learn the simple checks that help you spot suspicious addresses, unrealistic offers, weak contact information, and other warning signs before you buy or sign in.

A fake online store can look polished enough to fool almost anyone. Criminals can copy product photos, logos, reviews, checkout pages, and even the overall appearance of a legitimate retailer. That means appearance alone is not a reliable way to decide whether a website is safe.

The goal is not to become a website investigator. Use several quick checks together before entering a password, personal information, or payment details.

What is the fastest way to check an unfamiliar website?

Start with the address, how you arrived there, the offer being made, and whether you can independently verify the business. No single check proves legitimacy.

1. Look carefully at the website address

Scammers often register addresses that resemble familiar brands by adding words, changing letters, or using a different domain ending. Read the address from beginning to end rather than relying on the logo displayed on the page.

If you already know the company, type its address yourself, use a bookmark you trust, or open its official app.

2. Remember that HTTPS does not prove a store is honest

The padlock or HTTPS means the connection between your browser and the website is encrypted. Fraudulent websites can use encryption too. Treat HTTPS as a normal technical requirement, not proof that the business itself is trustworthy.

3. Ask how you reached the website

Be more cautious if you arrived through an unexpected text, email, social-media message, pop-up, QR code, or advertisement promoting an unusually good deal. When possible, independently search for the company rather than returning through the original link.

4. Be skeptical of prices that are dramatically lower

Large discounts are possible, but fake stores often advertise popular or hard-to-find products at prices designed to override your caution. Compare the price with established sellers before buying.

5. Look for believable business information

Check the contact page, shipping information, return policy, privacy information, and customer-service details. Missing information, copied text, inconsistent company names, or contact information that does not match the business are warning signs.

6. Search for information outside the website

Search the business name along with terms such as “reviews,” “scam,” or “complaints.” Look at more than one independent source. Reviews displayed by the store itself can be fabricated.

7. Look at the age and context of the business

A new website is not automatically fraudulent, and an old domain is not automatically safe. But a store claiming decades of history while having almost no independent presence deserves additional scrutiny.

8. Be cautious with payment methods

Credit cards generally provide stronger dispute protections than many irreversible payment methods. Be especially cautious if an unfamiliar retailer insists on gift cards, cryptocurrency, wire transfers, or another unusual method.

9. Pay attention to what information is requested

A normal purchase does not require your email password, bank-account sign-in, one-time verification code, or unrelated sensitive information. Stop when a checkout process asks for information that does not make sense for the transaction.

Your 30-second website check

What if you are still unsure?

Do not buy yet. Search for the retailer independently, compare the product with established stores, and contact the company through information you find separately. Walking away from a questionable deal is safer than trying to prove that it is fraudulent.

What if you already placed an order?

If you now believe the store may be fraudulent, save receipts, confirmation emails, screenshots, and transaction information. Contact your card issuer or payment provider using trusted contact information and explain the situation.

If you created an account using a password that you also use elsewhere, change that password on the legitimate accounts where it was reused.

What not to do

How do you know you are safer?

A safer purchase is one where the address, business information, independent reputation, payment method, and offer all make sense together. You should be able to reach that conclusion without relying on the seller's own claims alone.

The Know Phishing takeaway

Slow down, check the address, research the seller independently, use a payment method with reasonable protections, and leave when the pieces do not add up.

Related Know Phishing Guides