TL;DR: No single tool can prove a website is safe, but a few quick checks catch most fake shops: read the domain, check its age, note how it wants payment, and see whether Google's Safe Browsing site status flags it. A clean result is not a guarantee. Free tool: Scan My Shadow's digital footprint checker at scanmyshadow.com/digital-footprint-checker.

👉 Run a free digital footprint check on yourself →

Fake websites copy real shops, banks and government pages, or invent brands with unbelievable prices. They are cheap to build and often launched just before a sale or a product release.

Seven quick tests

  1. Read the domain letter by letter. Look for extra words, swapped letters or unusual endings. Type the retailer's address yourself instead of clicking an ad or message.
  2. Check the domain's age. The ICANN lookup shows a registration date for many domains. A "10 years in business" shop on a domain registered last month is a warning. Some records are hidden, so a blank result is not proof either way.
  3. Check Safe Browsing. Google's site status tool shows whether a page is flagged. New scam sites may not be listed yet.
  4. Do not trust the padlock. HTTPS only means the connection is encrypted; scam sites use it too.
  5. Look at the payment options. Bank transfer only, a UPI request to a personal name, crypto or gift cards are red flags. A card or a marketplace with buyer protection is safer.
  6. Search for independent reviews. Search the site name with "scam" or "reviews" and read forums and news, not just testimonials on the site.
  7. Test the business details. Look for a real address, phone number, returns policy and consistent product photos. A reverse image search often exposes copied pictures.

Where fake websites hide

If you already paid or entered details

For a card payment, ask your issuer to dispute it and cancel the card. For UPI or bank transfers in India, call 1930 and file at the cybercrime portal (see how to file a cybercrime complaint). Change any password you reused, and report the site to Google Safe Browsing. Get Safe Online publishes free guidance on spotting fake websites.

FAQs

How can I check if a website is a scam?

Read the domain carefully, check its registration age, look it up in Google Safe Browsing, note the payment methods, search for independent reviews and test the business details. Use several signals, since none is conclusive.

Does the padlock mean a website is safe?

No. The padlock only shows the connection is encrypted. Scam sites can and do use HTTPS.

How do I report a scam website?

In the US, report to the FTC at ReportFraud.ftc.gov; in India, file at cybercrime.gov.in and call 1930 if you lost money. You can also report the page to Google Safe Browsing and tell your card issuer or bank.

Are fake website detector tools reliable?

Treat them as one signal. Automated checkers can miss brand-new scam sites and can wrongly flag legitimate small shops, so combine them with the checks above.

Before scammers use your details, see them first: check what is already public about you.

Curious what's already out there? Scan My Shadow checks a phone number and email across 1,500+ sources and sends a clear report — no guesswork, just facts. Start your scan.

Sources

Related Reading