How-to guide

How to tell if a website is legit

Scam sites imitate real brands to steal logins and card details, or take your money for goods that never arrive. Before you enter a password or pay, run these checks.

Check something suspicious now

Check this now →

Get a clear Stop / Verify / Continue verdict from Scam Doctor. Free check, no signup.

Check the domain first

The web address is the biggest tell. Scammers register look-alikes that are one character off the real thing.

  • Type the brand's address yourself instead of using a link from an ad, text, or DM.
  • Watch for extra words, hyphens, or odd endings (brand-deals.shop, brand-outlet.top).
  • Be wary of a brand name sitting on a generic or brand-new domain.

Check the trust signals

Beyond the domain, weigh these together — no single one is proof, but several together is a clear warning:

  • Prices far below everywhere else, pushed with a countdown timer.
  • No returns policy, no real contact details, no company address.
  • Only odd payment methods (wire, crypto, gift cards) at checkout.
  • A very young domain with no independent reviews.

Verify before you pay

Paste the link into Scam Doctor for a clear verdict, pay with a credit card you can dispute, and search the brand name plus "scam" or "reviews" to see what others report.

Frequently asked questions

How can I check if a website is safe?

Verify the exact domain, look for reviews and a returns/contact policy, and paste the link into Scam Doctor for an instant verdict before you pay or log in.

Is a padlock (HTTPS) enough to trust a site?

No. Scam sites can get free HTTPS certificates too. A padlock means the connection is encrypted, not that the site is honest.

More from the blog