Skip to main content
Phishing & Scams·Updated 2026-10-21

How can I check whether a website is legitimate before buying or signing in?

Short answer

Confirm the exact domain spelling, reach the site by typing the address or using a saved bookmark, and look for independent reviews of the shop outside the site itself. The padlock icon only means the connection is encrypted; scam sites have padlocks too.

The details

Warning signs include prices far below every other seller, payment only by bank transfer, gift card or cryptocurrency, no verifiable contact details, and a domain registered very recently. Paying by credit card generally gives you stronger options to dispute a fraudulent charge than a bank transfer.

A passive check of a link, without visiting it, can reveal look-alike domains and redirects.

Useful next reads and tools

Sources

Related questions