How to verify a suspicious website
A practical checklist for checking a website before you create an account, pay money or share sensitive information.
1. Inspect the exact domain
Look at the spelling of the hostname. Brand impersonation often relies on small changes, extra words or misleading subdomains. HTTPS is useful for encrypted transport, but HTTPS alone does not prove that a site is legitimate.
2. Check the business identity
Look for a real company name, physical address, support channels, legal pages and consistent information. Then independently verify important details rather than trusting only the website's own claims.
3. Examine the payment request
Be cautious when a new seller demands unusual payment methods, personal transfers, gift cards, cryptocurrency or urgent deposits. Payment friction is not proof of fraud, but it can be an important investigation signal.
4. Look for consistency
Compare product names, phone numbers, email domains, company registration details, policies and social profiles. Inconsistencies deserve further verification.
5. Separate reviews from evidence
Online reviews can be useful context, but reviews themselves can be fake, copied or selectively presented. Treat them as one input among several.
Quick checklist
- Exact domain checked
- Independent company details verified
- Payment method understood
- Return/refund terms reviewed
- Urgency claims independently verified
- No sensitive credential shared merely to “verify” the account