Phishing websites designed to mimic popular banks, retailers, and social networks are becoming increasingly sophisticated. Entering your password or credit card details into a fraudulent website can lead to identity theft and financial fraud.
Before typing sensitive information, run through this 5-point safety checklist to ensure the website is legitimate.
1. Inspect the Exact Domain Name for "Typosquatting"
Scammers register domains with slight spelling alterations that look nearly identical at a glance:
- Real:
paypal.com - Fake Phishing:
paypa1.com,pay-pal-security.com, orpaypal.co.fraud.net
Rule: Always look at the core domain immediately before the first forward slash (/). For example, in login.bank.com.scam.org/account, the real host is scam.org, not your bank!
2. Check the SSL/TLS Padlock and Certificate
- Look at the left side of your browser's address bar.
- Click the Tune / Padlock icon.
- It should indicate Connection is secure.
- Click Certificate is valid to view who the certificate was issued to and its expiration date.
Important Note: A padlock means the connection is encrypted, but even scammers can obtain basic SSL certificates. Always verify the domain name spelling alongside SSL status!
3. Run the URL Through Google Safe Browsing Transparency Report
Google scans billions of URLs daily for malware, deceptive social engineering, and phishing payloads:
- Open a new tab and go to:
https://transparencyreport.google.com/safe-browsing/search - Copy and paste the suspicious website's URL into the search box.
- Google Safe Browsing will return a real-time safety diagnostic report: No unsafe content found or Deceptive site / Malicious redirect detected.
4. Check Domain Age Using WHOIS Lookup
Legitimate corporations have domain registration histories spanning years. Phishing websites are usually registered only days or weeks prior:
- Visit whois.domaintools.com or who.is.
- Enter the website domain.
- Check the Created / Registered On date. If an online shopping website claiming massive discounts was registered 3 days ago, it is almost certainly fraudulent.
5. Check for Trustworthy Payment Methods
Legitimate e-commerce websites offer secure payment gateways like Apple Pay, Google Pay, PayPal, or verified Visa/Mastercard 3D-Secure checkout.
- Red Flag: If a store exclusively asks for direct wire transfers, Western Union, crypto payments, or gift card codes, immediately close the tab.
