Is This Website Safe? How to Check a Site Before You Trust It

"Is this website safe?" is exactly the right question to ask before you type your card number, create an account, or download a file. A site can look polished, show a padlock, and still be a trap — modern scam pages are cloned pixel-for-pixel from real brands and hosted on convincing-looking domains.

The good news: you don't need to be technical to judge a site. Safety comes down to a handful of signals you can check in under two minutes. This guide gives you the exact checks security researchers use, a quick checklist you can run down, and answers to the questions people ask most.

Quick answer: how to tell if a website is safe

How to tell if a website is safe — 7 checks

1. Read the domain, not the page. The real website name is the part immediately before the .com / .com.au. In paypal.account-verify.com the real domain is account-verify.com, not PayPal. Watch for extra words (brand-secure.com), swapped characters (amaz0n), and odd endings (.top, .xyz, .shop).
2. Check the domain's age. A shop claiming "trusted since 2011" on a domain registered last month is lying. Look it up on whois.domaintools.com — a registration date under about six months old is a warning sign, especially for a store asking for payment.
3. Look the site up off-site. Search the exact site name plus "scam", "review", or "legit". Real businesses leave a trail on Trustpilot, ProductReview, Reddit, or news articles. A complete absence of independent mentions is itself a red flag.
4. Check how you can pay. Safe sites accept credit card or PayPal because those carry chargeback and buyer protection. "Bank transfer, crypto, or gift card only" strips away every safety net — which is exactly the point for a scammer.
5. Find real contact details. A genuine business lists a physical address, a phone number, and a business email on its own domain. A contact form plus a free Gmail or Hotmail address is not enough for anything involving your money.
6. Read the policies and the writing. Missing, copy-pasted, or wrong-company returns and privacy policies are a giveaway. So is clumsy grammar on payment and trust pages that a real retailer would have proofread.
7. Verify every link before you click it. If the site — or the message that led you there — contains links, hover to preview them and confirm they stay on the same real domain. Our guide to spotting a fake link breaks down the subdomain and lookalike tricks in detail.

Short on time? Paste the address into the scam website checker and it runs the domain, reputation, and lookalike checks for you in seconds.

Is this site safe? Quick checklist

Is this website safe to buy from?

Shopping adds one more layer of risk: your money leaves before the goods arrive. On top of the seven checks above, pay with a method that has buyer protection (credit card or PayPal Goods & Services), screenshot the listing and order confirmation, and never pay a "release fee", "customs charge", or "account upgrade" to complete a purchase — those charges are invented purely to extract extra money.

For a full pre-purchase walkthrough, read Is this website legit? How to check before you buy. It covers fake "closing down" sales, cloned stores, and social-media shop ads in depth.

Signals a website is probably NOT safe

• Lookalike domain — the brand name plus an extra word or a country code, or a single swapped letter.
• Payment only via bank transfer, crypto, or gift cards.
• Prices far below every other seller for the identical item.
• Countdown timers and "only 1 left" pressure designed to stop you checking.
• No verifiable business identity — no ABN or company number, no address, no independent trace.
• Reviews only on the site itself, all five stars, all posted the same week.
• Requests for information a shop never needs — your full date of birth, ID photos, or your banking password.

What to do if a website isn't safe

1. Don't enter anything. Close the tab. Simply visiting a page rarely harms you; entering details is what causes the damage.
2. Go direct next time. Type the brand's real address yourself or use a saved bookmark instead of following a link from an ad, email, or text.
3. Run it through the checker. If you're unsure, paste the address into our free scam checker for an instant risk read.
4. Warn others. Report the site to Scamwatch (Australia), the FTC (US), or Action Fraud (UK).
5. If you already paid or shared details, act fast — open the have-I-been-scammed checklist for the exact recovery steps for your situation.

Frequently asked questions