Short answer: you can check most websites in under five minutes using free tools. Look up when the domain was registered, scan the link, check how the site wants you to pay, find a real business address, and search for independent reviews. If two or more of these checks fail, do not enter your card details or personal information.
Last reviewed: October 21, 2026 · By the TAHQEEQ Editorial Team
Why this matters
Fake shops, fake investment platforms and fake support pages are among the easiest scams to build and the hardest to spot at a glance. The U.S. Federal Trade Commission says Americans reported losing $15.9 billion to fraud in 2025, and that social media was the contact method linked to the highest reported losses, at more than $2 billion. Many of those scams start with a link to a website that looks professional.
A good-looking design proves nothing. Scammers copy real logos, photos and layouts in minutes. The checks below look at things that are much harder to fake.
Quick checklist
- Check how old the domain is
- Scan the link for known threats
- Look at the web address closely
- Do not trust the padlock alone
- Check how you are asked to pay
- Find a real business address and contact details
- Read the policies, and look for copied text
- Search for independent reviews
- See the site’s history and its social presence
1. Check how old the domain is
Many scam sites are brand new. A shop claiming “20 years in business” on a domain registered three weeks ago is a major red flag.
- Go to lookup.icann.org.
- Type the website address (for example
example.com) and press Lookup. - Find Registration date (also shown as “created”).
What to look for: a registration date within the last few months, combined with big discounts or claims of long history, is a strong warning sign. Some owners hide their details with a privacy service, which is normal for many legitimate sites, so use the date rather than the owner’s name.
2. Scan the link for known threats
- Open virustotal.com and choose the URL tab.
- Paste the full link and press Enter.
- Read the number of security engines that flag it.
You can also use Google’s Safe Browsing site status check. A clean result does not prove a site is safe, because new scam sites are often not yet reported. A flagged result, however, is a clear reason to leave.
3. Look at the web address closely
Scammers rely on addresses that look right at a glance.
| Trick | Example pattern |
|---|---|
| Misspelling | amaz0n-deals.com, paypa1.com |
| Extra words | brandname-official-store.shop |
| Brand in the wrong place | brandname.fake-site.com (the real domain is fake-site.com) |
| Unusual ending | .top, .xyz or .shop used by a “big brand” |
Always read the address from right to left up to the first single slash. The part just before the ending (.com, .ae and so on) is the real owner. When in doubt, type the brand name into a search engine yourself instead of clicking the link you were sent.
4. Do not trust the padlock alone
The padlock (https) only means the connection between you and the site is encrypted. It does not mean the owner is honest. Free certificates are available to anyone, including scammers. Treat https as the minimum, not as proof.
5. Check how you are asked to pay
This is one of the strongest signals. Be cautious if a site only accepts:
- Bank transfers or wire transfers to a personal account
- Cryptocurrency
- Gift cards
- Payment apps to a person rather than a business
According to the FTC, bank transfers and cryptocurrency were the payment methods linked to the highest reported losses in 2025. Credit cards usually give you the strongest chance of disputing a charge, so pay by card or through a trusted payment service when you can.
6. Find a real business address and contact details
Look for these on the Contact or About page:
- A full street address, not only a form or a free email address
- A working phone number
- A company name and, where relevant, a registration or license number
Paste the address into a map service to see whether it is a real shop or office. Search the company name together with the word “complaints” or “scam.” If the site claims to be based in your country, check that its registration can be found in your official business register.
7. Read the policies and look for copied text
Real shops have clear shipping, return and privacy policies. Scam sites often have vague policies, or copy them word for word from another site, sometimes leaving the wrong company name in the text. Copy one distinctive sentence from the returns policy and paste it in quotation marks into a search engine. If the same text appears on many unrelated sites, treat the site with suspicion.
8. Search for independent reviews
- Search
"site name" reviewsand"site name" scam. - Prefer reviews on independent platforms, forums and consumer groups, not only the site’s own testimonials.
- Be careful with perfect scores, many reviews posted on the same day, or reviews that all use similar wording. These can be fake.
- Reverse-search product photos with Google Images or TinEye. If the same photos appear on unrelated shops, they were probably stolen.
An absence of reviews is also information. A new site with no track record and a huge discount carries more risk than an established one.
9. See the site’s history and its social presence
The Internet Archive’s Wayback Machine shows old copies of a website. If a site claims to have operated for years but the archive shows nothing before last month, that does not match. Also check the social media links. Real brands usually have accounts with a long history of posts and genuine comments. Accounts created recently, with few posts or with comments turned off, are a warning sign.
Red flags that should stop you right away
- Prices far below every other seller, especially on popular electronics or luxury brands
- Countdown timers and “only 2 left” messages that reset
- Pressure to move to a private chat app or to pay outside the website
- Requests for your one-time passcode, card PIN or a copy of your ID for a simple purchase
- A site you reached from an unexpected text, social media ad or direct message
What to do if you already entered your details
- Contact your bank or card issuer immediately, report the transaction and ask them to block the card.
- Change the password on any account that uses the same password, and turn on two-factor login.
- Keep screenshots, receipts and the web address.
- Report the website to the FTC at ReportFraud.ftc.gov if you are in the United States, and to the FBI’s IC3 at ic3.gov if money was lost online. In other countries, report to your national consumer or cybercrime authority.
Frequently asked questions
Does the padlock mean a website is safe?
No. It only means your connection to the site is encrypted. Scam websites can and do use it.
Is a new website always a scam?
No. Many honest businesses are new. But a new domain combined with huge discounts, unusual payment methods or missing contact details is a strong reason to avoid it.
What is the fastest check I can do?
Look up the domain’s registration date at lookup.icann.org and search the site’s name with the word “scam.” This takes about one minute.
Can a website with good reviews still be fake?
Yes. Reviews can be bought or copied. Look for independent sources and for reviews that mention specific details about delivery and returns.
How do I check a website on my phone?
All of the tools in this guide work in a mobile browser. Use virustotal.com and lookup.icann.org the same way, and avoid tapping links in unexpected messages.
Sources
- FTC, testimony to the Joint Economic Committee on fraud, March 2026
- FTC Consumer Advice
- FBI Internet Crime Complaint Center
This guide is for general information and is not legal or financial advice. See our Disclaimer.