How to Check If a Website Is a Scam: 8 Red Flags and Free Tools
Not sure if a website is legit? Learn the 8 red flags that indicate a scam website, plus free tools you can use to verify any site in seconds.
The Problem: You Found a Website and Don't Know If It's Safe
Maybe you saw an ad on Instagram for a store selling designer items at 80% off. Maybe someone in a group chat shared a link. Maybe you Googled a product and landed on a site you've never heard of.
The question is always the same: should I trust this site with my money or personal information?
Here are 8 red flags to check — and free tools that do the checking for you.
Red Flag 1: The Domain Is Brand New
Scam websites are disposable. They're created, used to collect money or data for a few weeks, and then abandoned. Legitimate businesses tend to have domains that are years old.
How to check: Look up the domain's WHOIS record. If the domain was registered less than 6 months ago, be cautious. Less than 30 days? Major red flag.
Free tool: RiskScope checks domain age automatically as part of its analysis.
Red Flag 2: No Contact Information
Legitimate businesses want you to be able to reach them. Scam sites either have no contact page at all, or list a generic Gmail/Yahoo address instead of a business email.
What to look for:
- A real physical address (not just a PO box)
- A phone number that works
- An email on their own domain (support@theirsite.com, not theirsite.shop@gmail.com)
Red Flag 3: Prices That Are Too Good to Be True
A website selling Nike shoes for $15 or iPhones for $99 is not a deal — it's a trap. Scammers use extreme discounts to create urgency and override your judgment.
Rule of thumb: If the price is more than 70% below retail, investigate further before buying.
Red Flag 4: Pressure Tactics and Fake Urgency
Scam sites love countdown timers, "only 2 left!" warnings, and popups showing "Sarah from Ohio just bought this item!" These are designed to make you act before you think.
What to look for:
- Countdown timers that reset when you refresh the page
- "Limited stock" claims on every item
- Fake purchase notifications
Red Flag 5: No HTTPS or Invalid SSL Certificate
Any legitimate website handling payments should use HTTPS (the padlock icon in your browser). While having HTTPS doesn't guarantee a site is safe (scammers use it too), not having it is a clear warning sign.
How to check: Look for the padlock icon in the address bar. Click it to check the certificate details.
Red Flag 6: Copied or Stolen Content
Many scam sites steal product images, reviews, and even entire page layouts from legitimate retailers. They may also have generic "About Us" text that reads like it was written by AI with no specific details about the actual company.
How to check: Right-click an image and search Google for it. If it appears on dozens of other sites, the site may be using stolen content.
Red Flag 7: Listed in Threat Databases
Security researchers maintain databases of known phishing, malware, and scam sites. If a site appears in any of these databases, avoid it entirely.
Key databases:
- Google Safe Browsing
- PhishTank
- VirusTotal
- Spamhaus
Free tool: RiskScope checks all of these simultaneously and gives you a single risk score.
Red Flag 8: Suspicious Payment Methods
Legitimate stores accept credit cards and established payment processors (PayPal, Stripe). Be wary of sites that:
- Only accept wire transfers or cryptocurrency
- Ask you to pay via gift cards
- Redirect to unfamiliar payment pages
- Ask for your bank login credentials
Credit cards offer the best fraud protection — if you must buy from an unfamiliar site, always use a credit card rather than a debit card.
Free Tools to Check Any Website
| Tool | What It Does | Cost |
|---|---|---|
| RiskScope | Aggregates 14+ threat sources into one risk score | Free |
| Google Safe Browsing | Checks Google's phishing/malware database | Free |
| VirusTotal | Scans URLs with 70+ security engines | Free (limited) |
| WHOIS Lookup | Shows domain registration details | Free |
| Trustpilot | User reviews of businesses | Free |
The advantage of RiskScope is that it checks most of these sources in a single search, saving you from checking each one individually.
What to Do If You've Already Been Scammed
- Contact your bank or credit card company immediately — request a chargeback
- Change your passwords if you created an account on the scam site
- Report the scam to the FTC at reportfraud.ftc.gov
- Report the website on RiskScope to help warn others
- Monitor your accounts for unauthorized transactions over the next few months
Check a Website Right Now
Wondering about a specific website? Enter any domain on RiskScope and get an instant risk assessment powered by 14+ threat intelligence sources. No signup required.
Check Any Website Yourself
RiskScope is free. No signup required. Enter any domain and get an instant risk assessment.