How to Spot a Fake Website Before You Enter Your Credit Card

A scam website can look identical to the real thing. Same logo, same layout, same product photos — sometimes even a working shopping cart. The only difference is that when you enter your credit card number, it goes straight to a thief instead of a real business.

These fake sites are getting more sophisticated every year, and they cost Americans billions of dollars annually. But there are six things you can check in under a minute that will catch nearly every one of them.

1. Check the URL Carefully (Letter by Letter)

This is the single most important check. Scammers create web addresses that look almost right at a glance but contain subtle differences.

Real examples of fake URLs:

• amaz0n.com (zero instead of the letter O)
• paypa1.com (number 1 instead of the letter L)
• walmart-deals-store.com (extra words added to a real brand name)
• bankofamerica.secure-login.com (the real brand is in the wrong part of the URL)

The rule: The real website name is always the part just before the .com (or .org, .net). Everything before that is a subdomain that anyone can create. So bankofamerica.com is real, but bankofamerica.evil-site.com is not — because the actual domain is "evil-site.com."

On your phone, the URL bar is small and often cuts off long addresses. Tap the address bar to see the full URL before entering any information.

2. Look for the Padlock — But Don't Stop There

You have probably heard to look for the padlock icon next to the web address. That padlock means the site uses HTTPS encryption, which protects your data in transit.

Here is the important part: the padlock only means the connection is encrypted. It does not mean the site is legitimate. Scammers can get HTTPS certificates for free in minutes. Over 80% of phishing sites now have the padlock.

So check for the padlock — if it is missing, leave immediately. But if it is there, keep checking the other items on this list. A padlock alone is not enough.

3. Search the Company Name + "Scam" or "Review"

Before buying from any website you have not used before, open a new tab and search for the company name followed by "scam" or "reviews."

For example: "BestDealsElectronics.com" scam

If the site is fraudulent, you will often find:

• Warnings on Reddit, Facebook, or consumer forums
• Reports on the Better Business Bureau (BBB) website
• Scam alert posts from other consumers

If you search and find absolutely nothing about the company — no reviews, no social media, no mention anywhere — that itself is a red flag. Real businesses have an online footprint.

4. Check the Contact Page and About Us

Legitimate businesses want you to be able to reach them. Scam sites either have no contact page at all, or they provide:

• A generic Gmail or Yahoo email address instead of a company email
• A physical address that does not exist (search it on Google Maps)
• No phone number
• A vague "About Us" filled with generic text that could describe any company

If you cannot find a real address, a real phone number, and a company email address (like support@companyname.com), do not trust the site with your financial information.

5. Look at the Prices (If It's Too Good, It's Not True)

A brand-new iPhone for $99. A $500 designer handbag for $45. Ray-Ban sunglasses for $19.99. These prices are not deals — they are bait.

Scam shopping sites use impossibly low prices to create urgency. They want you to think "I need to buy this before it sells out" instead of "why is this so cheap?"

A good rule of thumb: If a price is more than 50% below what you would pay at a major retailer, something is wrong. Check the same product on Amazon, Walmart, or the manufacturer's website to compare.

Also watch for:

• Countdown timers creating fake urgency ("Only 3 left! Sale ends in 2 hours!")
• Every single item on the site being heavily discounted
• No sold-out items (real stores run out of popular products)

6. Check How Old the Website Is

Scam websites are usually brand new because they get reported and shut down frequently. You can check when a website was created using a free tool called WHOIS lookup.

Go to whois.domaintools.com and type in the web address. Look for the "Created Date." If the website was created in the last few months, be very cautious — especially if it claims to be an established company.

A website that says it has been "serving customers since 2010" but was registered three weeks ago is lying to you.

Key Takeaways

Your 60-second website safety check:

1. Read the URL letter by letter — scammers use lookalike addresses
2. Padlock is necessary but not sufficient — scam sites have them too
3. Search "[site name] scam" — see what others have found
4. Check the contact page — real businesses have real addresses and phone numbers
5. Question unbelievable prices — if it seems too good, it is
6. Check the domain age — brand new sites selling established brands are red flags

When in doubt, do not buy. Close the tab, go directly to a retailer you know and trust, and buy the product there — even if it costs a little more. The money you save by avoiding a scam site is worth far more than any discount.

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.