Check 1: Look for HTTPS in the Address Bar

The first thing to check is whether the website uses HTTPS — a secure, encrypted connection.

1. 1Look at the address bar at the top of your browser.
2. 2The web address should start with https:// (not just http://).
3. 3You should also see a padlock icon to the left of the address.
4. 4Click the padlock to see the security certificate details.

Check 2: Look at the Domain Name Carefully

Scam websites often use domain names that look like real brands but have subtle differences.

• Look for misspellings: "amaz0n.com" or "paypa1.com" instead of the real domain.
• Look for extra words: "amazon-deals.com" or "walmart-official.com" are not the real sites.
• Look for unusual extensions: ".net" or ".shop" instead of ".com" for a well-known brand.
• The real domain is the part just before the last dot and extension: in "shop.amazon.com," the domain is "amazon.com" — that is legitimate. In "amazon.shop-deals.com," the domain is "shop-deals.com" — that is not Amazon.

Check 3: Search for the Website's Reputation

A quick search can reveal whether others have had problems with a website.

1. 1Search for the website name plus "reviews" or "scam" (for example, "XYZ store reviews" or "XYZ store scam").
2. 2Check the Better Business Bureau at bbb.org.
3. 3Check Trustpilot at trustpilot.com.
4. 4Look for reviews on Google by searching the website name.
5. 5Be cautious if you find no reviews at all — legitimate businesses usually have some online presence.

Check 4: Look for Contact Information

A legitimate business will have clear contact information on its website.

• Look for a physical address, phone number, and email address.
• Scroll to the bottom of the page — contact information is usually in the footer.
• If the only contact option is a web form with no other details, be cautious.
• Try calling the phone number or sending a test email to see if you get a response.

Check 5: Look at the Website's Age and History

Scam websites are often newly created. You can check when a domain was registered.

1. 1Go to whois.domaintools.com.
2. 2Enter the website's domain name.
3. 3Look at the "Created" date. A website created last month selling expensive electronics at huge discounts is a red flag.

Check 6: Watch for These Red Flags

These warning signs suggest a website may not be trustworthy.

• Prices that are dramatically lower than anywhere else — if it seems too good to be true, it usually is.
• Poor grammar and spelling throughout the website.
• No return policy, privacy policy, or terms of service.
• Pressure tactics: "Only 2 left!" or "Sale ends in 10 minutes!" designed to rush you into buying.
• Only accepts wire transfers, gift cards, or cryptocurrency — legitimate stores accept credit cards.
• No secure checkout page (no HTTPS when you enter payment information).

What to Do If You Are Not Sure

If you are uncertain about a website, these steps can help.

• Search for the product on a well-known retailer like Amazon, Walmart, or Target instead.
• Use a credit card rather than a debit card — credit cards offer better fraud protection.
• Use PayPal or Apple Pay when available — these add a layer of protection between your card and the merchant.
• Trust your instincts. If something feels off, shop somewhere else.