How to Spot a Fake Website

A free, step-by-step guide to spotting fake shopping sites, phishing pages, and lookalike scams in 2026 — built for shoppers who deserve protection without a paywall.

⚡ Quick Answer (30 seconds)

Fake websites usually have these tells:

Bottom line: Check the URL character-by-character before entering payment info. One wrong letter = fake site.

Why This Matters

In 2025, Americans reported losing $2.1 billion to scams that started on social media alone — and shopping scams were the #1 most-reported type. Fake websites are at the center of this. Scammers create lookalike versions of real brands (Temu, Shein, Amazon, eBay, Nike) to steal credit cards and personal information.

The scary part: these fake sites are getting better. AI-generated logos, copied product photos, fake reviews, even fake SSL certificates. The old 'just look for the green padlock' advice doesn't work anymore. You need a real framework — and that's what this guide is for.

Common Red Flags To Watch For

These are the specific patterns scammers use. If you spot 2 or more, walk away.

Real-World Examples

These actual scam patterns are happening right now — knowing them helps you spot them.

Example 1: Fake 'Temu Outlet' on Facebook Ads

Scammers run Facebook ads showing real Temu products at '90% off clearance prices.' Clicking leads to temu-outlet.shop or similar fake URL. The site looks identical to real Temu but steals your card. Real Temu doesn't run 'outlet' sites — only temu.com is legitimate.

Example 2: Fake Nike 'Holiday Sale' Sites

During Black Friday 2025, scammers registered dozens of nike-blackfriday.com, nike-sale.shop, nike-clearance.net domains. They showed real Nike products at impossibly low prices. Real Nike sales happen only on nike.com — never on lookalike domains.

Example 3: 'PayPal Verification' Phishing Sites

After making a real purchase, scammers send 'urgent payment verification required' emails linking to fake PayPal login pages (paypal-secure-verify.com). The fake site captures your credentials. Real PayPal never asks you to verify via email links.

Example 4: Fake Reviews on Instagram

Scammers create Instagram pages 'reviewing' fake shopping sites with paid actors. The 'reviewer' shows a real product they actually bought elsewhere, then directs followers to the fake site. The reviews look genuine but the site is fraudulent.

The Permanent Solution: Why Nudge Is Free

Protection shouldn't be behind a paywall.

Now you know what to watch for. But scammers evolve every day — new lookalike sites, new phishing tactics, new manipulation techniques. You shouldn't have to remember every red flag every time you shop. That's what Nudge is for.

We built Nudge to be the permanent layer of protection between you and these scams. Real-time trust scores on every site you visit. Automatic warnings when something looks off. No subscription. No account. No data collection. The people most vulnerable to online scams — older adults, lower-income shoppers, first-time buyers — are exactly the people who can least afford expensive security tools. Protection should be a right, not a luxury.

Free forever, no premium tier
No personal data collected
No account or signup needed
Never sells your data
Browsing stays on your device
Runs silently in background
Add to Chrome — Free

Prefer to Do It Manually? Here's How

Follow this 7-step framework every time you land on a shopping site you haven't used before. It takes 60 seconds and catches 95%+ of fake websites.

1

Check the URL Character-by-Character

This is the #1 tell. Real Temu is temu.com. Fake versions: temu-deals.com, temushopping.net, temu-clearance.shop, temu.com.deals.xyz. Type the URL into your address bar yourself — never trust links from email, text, or social media ads. One wrong letter or extra word = fake site.

2

Check the Domain Age

Real sites have been around for years. Fake sites are usually registered weeks or months ago. Use whois.com or icann.org/lookup to check when a domain was registered. If a 'major retailer' website was registered 3 weeks ago — it's fake.

3

Look for Real Contact Info

Real businesses have: a physical address, a phone number that works, a real customer service email (not a generic Gmail), and usually a corporate parent. Fake sites have: a contact form only, no phone, fake addresses (often a residential home or empty lot), and 'support@[brand]-deals.com' style emails.

4

Check for Pricing That's Too Good to Be True

Real Nike Air Jordans don't sell for $30. Real Apple AirPods don't sell for $25. Real Coach handbags don't sell for $40. If a brand-name item is priced 80%+ below normal retail, it's either counterfeit or a complete scam. The rule: if it feels impossibly cheap, it is.

5

Verify Trust Badges Are Real

Scammers slap fake 'Verified by Visa,' 'PayPal Secure,' 'BBB Accredited,' and 'McAfee Secure' badges on their sites. Real badges link to real verification pages — click them. Fake badges are just images that don't link anywhere. Click every trust badge to verify it leads to a real verification page.

6

Read the Return Policy and Terms

Real sites have detailed, legal return policies. Fake sites have either: no return policy, vague 'all sales final' policies, or copied-pasted policies that reference different store names. Search the policy text in Google — if it appears on 50 other shopping sites, it's a copied template used by scammers.

7

Check for Real Customer Reviews on Independent Sites

Don't trust reviews on the site itself — those are easily faked. Check Trustpilot, BBB, Reddit, and Google Reviews. Real sites have hundreds or thousands of mixed reviews over years. Fake sites have either: no external reviews, only 5-star reviews from the past month, or warnings from BBB and Trustpilot.

What To Do If This Has Already Happened

If you've already entered payment info on what you suspect was a fake site, take these 5 immediate actions:

  1. Call your credit card company right now — request immediate card cancellation and fraud monitoring. If you used debit, call your bank.
  2. Dispute the charge — most banks let you do this online. Use the fraud reason, not 'item not received' (fraud has stronger protections).
  3. Report to the FTC at ReportFraud.ftc.gov — this helps law enforcement track scammers and may help you recover funds.
  4. Change passwords on any accounts that used the same password as the fake site signup.
  5. Monitor your credit — set up free credit monitoring through Credit Karma or your bank for the next 90 days.

Free Tools & Resources

All the tools below are free. Use multiple for the strongest protection.

WhoIs.com

Check domain registration date and owner. If registered recently, it's likely fake.

Google Safe Browsing

Paste a URL at transparencyreport.google.com to see if Google has flagged it as unsafe.

Trustpilot

Check real consumer reviews. Fake sites often have warnings or no presence.

Better Business Bureau (BBB.org)

Verify if a company is real and check their complaint history.

Reverse Image Search

Use Google Images to verify product photos haven't been stolen from real retailers.

Nudge (Free)

Real-time trust scores on every site as you browse — no signup, no data collection.

Related Reading

Deeper dives on specific brands and categories.

Frequently Asked Questions

What's the #1 sign of a fake website?
The URL. Real Temu is temu.com — anything else (temu-deals.com, temu.shop, temu.store) is fake. Always type the URL directly into your browser instead of clicking links from email, text, or ads. This single habit prevents most fake-website scams.
Are sites with green padlocks always safe?
No. The green padlock (HTTPS) just means the connection is encrypted — not that the site is legitimate. Scammers can get SSL certificates easily. A fake site can have HTTPS and still steal your money. Check the URL, domain age, and contact info — not just the padlock.
How do I check if a website is legit before buying?
Check 5 things in 60 seconds: (1) URL is correct character-by-character, (2) domain age is more than 1 year via whois.com, (3) real contact info including phone, (4) reviews exist on Trustpilot/BBB/Reddit, (5) prices aren't impossibly cheap. If anything fails, don't buy.
Can I trust websites I find through Google ads?
Not automatically. Google ads are paid placements — scammers buy ads too. Some fake sites appear ABOVE the real site in search results because scammers outbid the legitimate brand. Always verify the URL before clicking an ad, especially for brands you don't normally shop at.
What about websites I find on Instagram or TikTok?
Social media is the #1 source of shopping scams — $2.1 billion in losses in 2025. Treat any 'shop now' link from Instagram, TikTok, or Facebook with extreme suspicion. If you see a product you like, search for it directly on Google to find the real brand.
How do scammers make fake websites look so real?
AI-generated logos, copied product photos, stolen content from real sites, fake reviews, and fake trust badges. The technical bar is low. What can't be faked easily: domain age, real customer service, legitimate corporate address, history on BBB/Trustpilot.
What if a website passes all the checks but I'm still unsure?
Trust your gut. If something feels off — pricing, design, customer service responsiveness — don't proceed. Worst case, you skip a real deal. Best case, you avoid a scam. The cost of caution is always less than the cost of fraud.
Are there free tools that can check websites for me automatically?
Yes. Nudge is a free Chrome extension that shows trust scores on every site you visit — no signup, no data collection, no premium tier. Google Safe Browsing (transparencyreport.google.com) also flags known-bad sites. BBB.org lets you check companies.
Should I always avoid sites with foreign addresses or phone numbers?
Not necessarily. Many real businesses are international (AliExpress, Shein, Banggood). The question is whether the address and phone are real and verifiable. A real Chinese company has a real Chinese corporate address. A fake site has a Photoshopped 'US headquarters' that doesn't exist.
How do I report a fake website I found?
Three places: (1) FTC at ReportFraud.ftc.gov for U.S. fraud, (2) Google Safe Browsing via safebrowsing.google.com, (3) the real brand being impersonated (most have anti-fraud teams). Reporting helps protect other consumers.
Why doesn't Google block fake websites automatically?
Google does block some, but scammers create new domains daily — faster than detection can keep up. Some fake sites appear in Google ads because scammers buy ads. Always verify URLs yourself rather than relying on search engines or social media to filter scams for you.
Is Nudge really free to detect fake websites?
Yes, completely free. No signup. No personal data collection. No premium tier. No subscription. We built Nudge because protection shouldn't be behind a paywall — especially not for the people most targeted by scams. The extension runs silently and warns you on suspicious sites automatically.

Free Real-Time Protection While You Browse

Nudge shows you a trust score on every site you visit, automatically. No more remembering every red flag. Free Chrome & Firefox extension — protection that shouldn't be behind a paywall.

Free forever
No personal data collected
No account needed
We never sell your data
Browsing stays on your device
Runs silently in background
Add to Chrome — Free
Free Chrome & Firefox extension · Real-time trust scores Add to Chrome — Free