How to Check If a Website Is Legit: 10 Checks

Fake websites can look exactly like the real thing. Scammers copy logos, product photos and even whole websites — in September 2026, the FTC warned that scammers were copying real car dealers’ sites, sometimes with the help of AI, down to their inventory and photos. You can’t always tell a fake by looking at it.

What you can do is run a few quick checks before you buy, sign in or pay. No single check is perfect, so use several. If any of them fail, close the page.

1. Did you get there on your own?

The safest way to reach a website is to type the address yourself or use a bookmark you created. Be cautious about any site you reached through a link in an unexpected text, email, pop-up or social media ad. The FTC says links in ads for unusually cheap brand-name products can lead to sites designed to take your money in exchange for a counterfeit item — or nothing at all.

2. Read the web address letter by letter

Scammers register addresses that look almost right. CISA, the federal cybersecurity agency, gives the example of a look-alike address such as “amazan.com.” The FBI warns about look-alike addresses and wrong endings such as .com in place of .gov. Check the spelling, extra words like “-secure” or “-support,” and what comes right before the “.com” or “.gov.”

EXAMPLE — SCAM

Today 4:12 PM●●● ▮

From: Order Support <orders@shop-checkout.example.com>

Subject: Your order could not be shipped

We were unable to ship your order because your payment details have expired. Please log in and update them within 24 hours to avoid cancellation:

https://secure-login.shop-checkout.example.com/account

3. For government services, look for .gov

Official U.S. government websites end in .gov. Ahead of the 2026 health insurance enrollment season, the FTC warned that scammers use web addresses and official-looking logos to make you think you’re on HealthCare.gov or Medicare.gov. Look for the .gov ending, and type the address yourself.

4. Skip the ads at the top of search results

Paid ads often appear above real search results. In August 2026 the FTC warned that some companies buy search ads that make them look like the official payment site for a business or agency, then charge unexpected fees. The FTC’s tips: scroll past the paid search results, or type the company’s address directly into your browser. The FBI gives the same advice for finding its own IC3 website.

5. Don’t trust the padlock alone

A padlock or “https” means your connection to the site is encrypted. As the FTC puts it, the “s” means the site is encrypted — but it doesn’t mean it’s a legitimate site. Scammers can encrypt sites too.

6. Search the name with “scam” or “complaint”

Before buying, the FTC suggests searching for the seller’s name and the website address, along with words like “review,” “complaint” or “scam,” to see what others say. Look past the first page of results. The FTC also warns that a copied site may still show glowing reviews, so one good result is not enough.

7. Is the price too good to be true?

Unusually low prices on brand-name products — especially in social media ads — are a common sign of a scam, the FTC says. Items may never arrive, or may look completely different from the picture.

8. Check how they want you to pay

This may be the most important check. The FTC says that if a seller insists on payment by gift card, wire transfer, payment app or cryptocurrency, it’s probably a scam. Pay by credit card when possible: the FTC says it best protects you, because you can dispute the charge if something goes wrong. A seller that demands an upfront payment by “wire transfer only” is a reason to walk away.

9. Don’t rely on star ratings

The FTC says some reviews and ratings are fake or misleading. Instead of trusting a high star rating, look for impartial reviews from sources you trust, and read the complaints.

10. For big purchases, verify in person

For expensive items such as a car, the FTC suggests asking to see the item — and the business — in person. If the seller refuses, be cautious. If it’s too far to visit, ask for an independent inspection; if the seller objects, consider going elsewhere.

Before you click “Buy”

• Read the refund and return policy and check the total cost, including shipping.
• Keep your receipt and order confirmation number. The FTC says they can help you get your money back from the seller.
• Know your rights: sellers must ship by the time they or their ads say they will, or give you the chance to cancel and get your money back.

If something went wrong

• Paid by credit card and the item never came? Contact the seller first; if that fails, dispute the charge. The FTC says your dispute should reach the card company within 60 days of the day the company mailed you the first bill with the charge.
• Entered a password? Change it, and change it anywhere else you used it.
• Entered card or Social Security details on a fake site? See our first-hour checklist.

Then report the scam website so browsers and investigators can warn others. For more ways scammers use fake sites and links, see phishing emails: real examples and 7 red flags.