A great deal pops up on a site you have never heard of. Before you type your card details, one question matters: is this website legitimate, or a trap? Fake shops and scam sites are everywhere, but they leave clues. Our GetMyPassword team shares a quick checklist for telling whether a website is legit, so you can shop and sign up without handing your money to a fraudster.
Check the address and the padlock
Read the domain carefully for misspellings or extra words — amaz0n-deals.com is not Amazon. The HTTPS padlock should be there, but remember it only means the connection is encrypted, not that the site is honest; scammers have padlocks too. So the padlock is a minimum, not a seal of trust.
Look for the signs of a real business
- Contact details: a real address, phone and email — not just a web form.
- Clear policies: returns, shipping and privacy pages that actually make sense.
- Independent reviews: search the site’s name plus “scam” or check Trustpilot.
- Professional quality: watch for broken English, stolen logos and stock-photo “team” pages.
The biggest red flags
Be very suspicious of prices that are too good to be true, pressure to “buy now” with countdown timers, and sites that only accept untraceable payment like wire transfer, gift cards or crypto. A legitimate shop offers normal card payment with buyer protection. If the only way to pay cannot be reversed, walk away.
If a deal feels too good to be true and the site insists on payment you cannot get back, that is not a bargain — it is the whole scam. The discount is the bait.
Protect yourself even on new sites
When you do try an unfamiliar site, limit your exposure. Use a unique password from our password generator so a breach there cannot affect your other accounts, pay with a method that has buyer protection, and never reuse your email password. That way, even a site that turns out to be dodgy cannot do lasting harm.
Frequently asked questions
How can I tell if a website is legit before buying?
Check the domain for misspellings, look for real contact details and clear policies, search for independent reviews, and be wary of prices that are too good to be true or untraceable payment methods.
Does the padlock mean a shopping site is safe?
No. The padlock only means the connection is encrypted, and scam sites have it too. Treat it as a minimum requirement, and judge the site by its domain, reviews, policies and payment options.
What payment method is safest on an unfamiliar site?
A card or a payment service with buyer protection, so you can dispute a charge. Avoid wire transfers, gift cards and crypto, which are untraceable and cannot be reversed if it is a scam.