How to Check if a Website Is Legit
A website is legit when a real, reachable business stands behind it. That is the whole test. Design proves nothing, and the padlock proves nothing. What proves it is a domain with history, contact details that actually work, prices that make commercial sense, and other people writing about the company somewhere other than its own site. The eight checks below take about five minutes.
The eight checks
1. Check how old the domain is
This single check filters out most fraudulent stores. Fake shops are usually taken down within months, so operators register new domains constantly. A site selling electronics on a domain created three weeks ago is a different proposition from one trading for eight years. Use our domain age checker or a WHOIS lookup.
2. Test the contact details, do not just look at them
Anyone can paste an address into a footer. Call the phone number. Search the address in a map service and see whether it is an office or a residential flat in another country. Send an email and see if a human replies. A real business answers; a fake one has a contact form that goes nowhere.
3. Search the company name plus "reviews" and "scam"
You are looking for discussion that exists outside the company's own website: forum threads, consumer complaints, news coverage. A business trading for years leaves a trail. A site with no independent footprint at all, despite claiming to be established, is contradicting itself.
4. Sanity check the prices
If a current-model item is 70 percent below every other retailer, that is the offer doing the work. Nobody sells below cost at scale. Deep discounts on desirable goods are the most reliable bait in online retail fraud.
5. Look at how they want to be paid
This is the most important check on the list. Legitimate retailers accept cards, because they can afford disputes. Pressure toward bank transfer, gift cards, or cryptocurrency exists for exactly one reason: those methods are hard to reverse. A site that only takes irreversible payment has told you what it is.
6. Read the writing
Not just for spelling. Look for product descriptions copied word for word from other retailers, stock photography used as "our warehouse", an About page describing a company that does not name a single person, and policies that contradict each other. Fraudulent sites are assembled fast, and it shows in the text.
7. Check the domain spelling against the real brand
If the site claims to be a known company, compare the domain character by character with the official one. Impersonation sites rely on you not noticing an inserted word or a swapped letter. See spotting fake and cloned sites.
8. Check blacklists and run an automated scan
Finally, see whether anyone has already reported it. Our free website checker queries fraud databases, reads the certificate, checks the domain age and returns a 0 to 100 score with the reasoning shown.
What fake sites have in common
| Signal | Why it matters | Weight |
|---|---|---|
| Domain only weeks old | Fraud sites are short-lived by design | High |
| Only irreversible payment accepted | Removes your ability to dispute | Very high |
| No working phone or address | No recourse when an order fails | High |
| Prices far below every competitor | Classic bait; nobody trades below cost | High |
| Copied descriptions and stock photos | Site assembled quickly from a template | Medium |
| No independent mentions anywhere | Contradicts any claim of being established | Medium |
One signal alone is often innocent: plenty of honest new businesses have young domains. Three or more together is the pattern that should stop you from paying.
Frequently asked questions
How do you check if a website is legit?
Check whether a real, reachable business stands behind it. Look up the domain age, find and actually test a phone number and address, search the company name alongside "reviews", and confirm prices are not far below every other seller. A legitimate business is easy to contact and easy to find written about elsewhere.
What are the signs of a fake website?
A domain only weeks old, prices far below every other seller, no working phone number or address, payment only by bank transfer, gift card or cryptocurrency, and copied descriptions or stock photography. One alone can be innocent; three together is close to conclusive.
Is a website legit if it has HTTPS and a padlock?
No. Certificates are free and issued in minutes, so almost every fraudulent site has one. The padlock means your connection is encrypted, not that the business is real.
How can I check who owns a website?
A WHOIS lookup shows the registration date, the registrar and sometimes the owning organisation. Most personal details are hidden by privacy services now, which is normal. The registration date is the useful part.
What should I do if I already paid a fake website?
Contact your bank or card issuer immediately about a chargeback. Bank transfers can sometimes be recalled within 24 to 48 hours. Keep order confirmations, screenshot the site, and report it to your national fraud body.
Fraud analysts and cybersecurity researchers specializing in online scam detection, phishing analysis, and victim fund-recovery guidance. About our team →