How to tell if a website is fake (the padlock isn't enough)
Scammers build fake shops, fake login pages, and fake support sites that look completely real. A few quick checks tell you what your eyes cannot.
Read the domain carefully
The web address is the surest tell. Watch for misspellings (amaz0n), extra words (paypal-secure-login.com), or an odd ending (.shop, .top) where you would expect the real one. A real brand's site lives on its real, exact domain.
The padlock does NOT mean safe
The padlock (HTTPS) only means the connection is encrypted, not that the site is honest. Scammers get padlocks too. The lock tells you nobody is eavesdropping; it says nothing about who you are actually talking to.
The other red flags
Prices far too good to be true. Pressure and countdown timers. No real contact details or address. A brand-new site with no history. Payment accepted only by wire, crypto, or gift card. Reviews that all sound the same or exist only on the site itself.
How to be sure
Get to important sites yourself: type the address, use a bookmark, or use the official app, rather than following an ad or a link. Search the store's name together with "scam" or "reviews". And when you pay, prefer a credit card, which usually offers the most protection if something goes wrong.
The short version
- The exact domain is the best tell; watch for misspellings, extra words, and odd endings.
- A padlock (HTTPS) means encrypted, not trustworthy; scammers have padlocks too.
- Too-good prices, pressure, and no real contact details are red flags.
- Reach important sites by typing the address or using the official app, not an ad or link.
Build the reflex, not just the knowledge.
BadgerQuest is a two-minute daily game that keeps this instinct sharp. Free for individuals, no card.
Play a round free →Training a team instead? See pricing · If you take cards, this one matters
Common questions
Does the padlock icon mean a website is safe?
No. The padlock (HTTPS) only means the connection is encrypted. Scam sites can and do have it. It tells you nobody is listening in, not that the site is honest.
How can I check if an online shop is legitimate?
Check the exact domain for misspellings or extra words, look for real contact details, search the name together with "scam" or "reviews", and be wary of prices that are too good or payment only by wire, crypto, or gift card. Pay by credit card where you can.
I already entered my details on a site I now think is fake. What should I do?
If you entered a password, change it (and anywhere you reused it). If you entered card details, contact your bank to freeze or replace the card. Then watch for follow-up scam contact.