TL;DR: Typosquatting is when a scammer registers a domain name that's a common misspelling of a popular website to trick visitors who mistype the real address. Double-check the URL before entering login details, use bookmarks for sites you visit often instead of retyping the address, and enable browser warnings for suspicious sites.
👉 Check my digital footprint — free 30-second check →
Typosquatting is when a scammer registers a domain name that's a common misspelling of a popular website to trick visitors who mistype the real address.
How Typosquatting Works
A scammer buys a domain like "amaz0n.com" or "paypa1.com" and builds a convincing fake login page. Anyone who mistypes the real address, or clicks a link using the fake domain, may unknowingly enter their credentials on the fake site.
Warning Signs to Watch For
A URL that's almost but not quite right, unexpected redirects, and a login page that looks correct but the address bar doesn't match the real company's domain.
How to Protect Yourself
Double-check the URL before entering login details, use bookmarks for sites you visit often instead of retyping the address, and enable browser warnings for suspicious sites.
If this looks similar to something else you've seen, it's worth reading What Is Vishing? How It Works and How to Protect Yourself.
This pattern shows up elsewhere too — see What Is Wardialing Robocalls? How It Works and How to Protect Yourself.
Frequently Asked Questions
What is Typosquatting?
Typosquatting is when a scammer registers a domain name that's a common misspelling of a popular website to trick visitors who mistype the real address.
How does Typosquatting typically work?
A scammer buys a domain like "amaz0n.com" or "paypa1.com" and builds a convincing fake login page. Anyone who mistypes the real address, or clicks a link using the fake domain, may unknowingly enter their credentials on the fake site.
What are the warning signs of Typosquatting?
A URL that's almost but not quite right, unexpected redirects, and a login page that looks correct but the address bar doesn't match the real company's domain.
How can I protect myself from Typosquatting?
Double-check the URL before entering login details, use bookmarks for sites you visit often instead of retyping the address, and enable browser warnings for suspicious sites.
What should I do if I think I’ve encountered Typosquatting?
Stop responding immediately, do not click any links or share information, and report it to the appropriate authority. If money or personal information was already shared, act quickly to secure your accounts and report the incident.