In short
Not sure a shop, bank page or booking site is real? Quick checks, from reading the web address to domain age, before you pay or log in.
Top warning signs: The domain doesn't match the brand; The website is only days or weeks old; Prices far below everyone else.
First thing to do: Paste the address into the TapSafely checker. It shows who really owns the site, how old it is and where the link leads.
How the scam works
Fake sites are cheap to make with shop templates and copied photos. They are promoted through social media ads, search ads and messages, and usually only live for a few weeks before moving to a new address.
Some sell nothing at all. Others send cheap copies, or exist only to collect card details and logins. Phishing sites copy banks, delivery companies and government portals to steal passwords and codes.
Red flags to look for
- The domain doesn't match the brand. Read the name just before the first single slash. nike.com is Nike; nike-outlet-clearance.shop is not.
- The website is only days or weeks old. Paste the address into our checker to see when it was registered. New shops with huge discounts are high risk.
- Prices far below everyone else. Big brands rarely sell at 70 to 90 percent off, especially on new products.
- No real company details. Look for a registered company name, a physical address and a way to contact a person. A form or a free email address alone is a warning sign.
- Only strange payment options. Bank transfer, crypto, gift cards or payment apps without buyer protection are red flags for a shop.
- Reviews exist only on the site itself. Search the site name with the word “reviews” and check independent review platforms.
- Pressure tactics. Countdown timers, “only 2 left” banners and pop-ups that won't close.
What to do if you get one
- Paste the address into the TapSafely checker. It shows who really owns the site, how old it is and where the link leads.
- Search for the site name plus “scam” or “reviews”, and look at results from independent sources.
- Go to well-known brands by typing their address yourself or using their official app, not through ads or links.
- Pay only with a credit card or a method that offers buyer protection, so you can ask for your money back.
- Never enter a password or one-time code on a page you reached from a message or ad.
What a padlock does and doesn't mean
The padlock (https) only means your connection to the site is encrypted. It says nothing about who runs the site. Most scam sites have a padlock too, because certificates are free.
If you already paid or shared details
Act quickly. It makes a difference.
- Contact your card provider or payment app immediately and ask about a chargeback or dispute.
- If you entered a password, change it on the real site and turn on two-step verification.
- Report the website to the ad platform where you saw it, and to the official service in your country.
More help: what to do after a scam, and where to report it in your country.
How to protect yourself next time
Keep security software with web protection on your devices
It blocks many known scam and malware websites and warns about dangerous apps. That matters most if you installed an app or "support" tool someone asked you to.
Free: Keep your phone and browser updated, and leave Google Play Protect or Microsoft Defender switched on. Both are free.
- Bitdefender Partner link Security suite for phone and computer with web and scam protection.
Watch for anyone using your identity
If you shared ID documents, card details or a Social Security number, monitoring can alert you when someone opens credit or accounts in your name.
Free: In the US, a credit freeze at Equifax, Experian and TransUnion is free and blocks most new-credit fraud. Elsewhere, ask your bank and your credit reference agency about fraud alerts.
- Aura Partner link US identity theft protection with credit monitoring and fraud insurance.
Compare the tools that help, and what each costs
Links marked Partner link may earn us a commission, at no cost to you. It never changes our advice, and the free option always comes first. Affiliate disclosure.
Questions people ask
Is a site safe if it appears at the top of search results?
Not necessarily. Scammers buy search ads too. The top result can be a paid ad that copies a real brand.
Can I trust a site that has a live chat?
A chat window proves nothing. Scam shops often use chat to reassure buyers.
What if the site is real but the deal still looks odd?
Contact the company through contact details you find independently, not the ones on the page you're unsure about.
Have you had this one?
Tell other people what the message said and how it reached you. It helps someone recognise it before they tap.
No stories yet. Yours could be the one that warns someone.
Official sources and further reading
We check our guides against advice from government agencies and consumer protection bodies.
- Check if something might be a scam (Citizens Advice)
- Shopping and paying safely online (UK National Cyber Security Centre)
- How to spot an unsafe online store (Get Cyber Safe, Communications Security Establishment Canada)
