In short
Not sure a shop, bank page or booking site is real? Quick checks, from reading the web address to domain age, before you pay or log in.
Top warning signs: The domain doesn't match the brand; The website is only days or weeks old; Prices far below everyone else.
First thing to do: Paste the address into the TapSafely checker. It shows who really owns the site, how old it is and where the link leads.
How the scam works
Fake sites are cheap to make with shop templates and copied photos. They are promoted through social media ads, search ads and messages, and usually only live for a few weeks before moving to a new address.
Some sell nothing at all. Others send cheap copies, or exist only to collect card details and logins. Phishing sites copy banks, delivery companies and government portals to steal passwords and codes.
Red flags to look for
- The domain doesn't match the brand. Read the name just before the first single slash. nike.com is Nike; nike-outlet-clearance.shop is not.
- The website is only days or weeks old. Paste the address into our checker to see when it was registered. New shops with huge discounts are high risk.
- Prices far below everyone else. Big brands rarely sell at 70 to 90 percent off, especially on new products.
- No real company details. Look for a registered company name, a physical address and a way to contact a person. A form or a free email address alone is a warning sign.
- Only strange payment options. Bank transfer, crypto, gift cards or payment apps without buyer protection are red flags for a shop.
- Reviews exist only on the site itself. Search the site name with the word “reviews” and check independent review platforms.
- Pressure tactics. Countdown timers, “only 2 left” banners and pop-ups that won't close.
What to do if you get one
- Paste the address into the TapSafely checker. It shows who really owns the site, how old it is and where the link leads.
- Search for the site name plus “scam” or “reviews”, and look at results from independent sources.
- Go to well-known brands by typing their address yourself or using their official app, not through ads or links.
- Pay only with a credit card or a method that offers buyer protection, so you can ask for your money back.
- Never enter a password or one-time code on a page you reached from a message or ad.
What a padlock does and doesn't mean
The padlock (https) only means your connection to the site is encrypted. It says nothing about who runs the site. Most scam sites have a padlock too, because certificates are free.
If you already paid or shared details
Act quickly. It makes a difference.
- Contact your card provider or payment app immediately and ask about a chargeback or dispute.
- If you entered a password, change it on the real site and turn on two-step verification.
- Report the website to the ad platform where you saw it, and to the official service in your country.
More help: what to do after a scam, and where to report it in your country.
Questions people ask
Is a site safe if it appears at the top of search results?
Not necessarily. Scammers buy search ads too. The top result can be a paid ad that copies a real brand.
Can I trust a site that has a live chat?
A chat window proves nothing. Scam shops often use chat to reassure buyers.
What if the site is real but the deal still looks odd?
Contact the company through contact details you find independently, not the ones on the page you're unsure about.
Official sources and further reading
We check our guides against advice from government agencies and consumer protection bodies.
- Check if something might be a scam (Citizens Advice)
- Shopping and paying safely online (UK National Cyber Security Centre)
- How to spot an unsafe online store (Get Cyber Safe, Communications Security Establishment Canada)