Fake online shops are a booming business for scammers. They copy a real brand’s look, promise unmissable deals, and disappear with your money or card details. The good news is that most fakes give themselves away if you know where to look. A couple of minutes of checking before you type in your card number is the cheapest insurance you will ever buy. Here is how to do it, step by step.

Fakes are more convincing than they used to be. Cheap website tools let a scammer clone a storefront’s design in an afternoon, and free security certificates hand them the same padlock a real store has. So the old shortcuts, it looks professional, it has a lock, it came up in a search, no longer separate real from fake. What follows is a short set of checks that still do, built around looking past the surface to the few things scammers find hardest to fake.

Read the exact domain in the address bar

The web address is the single most reliable tell. Scammers cannot use the real company’s exact domain, so they get as close as they can and hope you do not look carefully.

  1. Read the domain slowly, letter by letter. Watch for subtle swaps such as a zero replacing an o, as in amaz0n.com, or an added word or hyphen like apple-billing-update.com.
  2. Find the true domain by looking at what sits immediately before the first single slash. In netflix.com.user-login.io the real site is user-login.io, not Netflix, because everything before it is just a subdomain designed to fool you.
  3. Be wary of unusual endings on a familiar brand name, such as a well-known shop suddenly living on a .shop or .top address you have never seen it use.
  4. If you reached the site from an email, ad, or text, do not trust the link. Open a new tab and type the address you know, or search for the official site instead. Links from untrusted messages are a common way people land on fakes. For more on this tactic, see what phishing is.
  5. On a phone, tap the address bar to expand the full URL, since mobile browsers often hide most of it. A truncated address is exactly where a sneaky lookalike hides.

This one habit, pausing to actually read the address, catches a huge share of fakes on its own. Scammers rely on the fact that most people glance at a logo and a familiar-looking name and never check the real domain underneath. Make reading the address the first thing you do on any site that is about to ask for money or personal details.

Do not trust the padlock alone

Many people were taught that a padlock means a site is safe. That advice is out of date and dangerous.

  1. Understand what the padlock means: only that the connection between your browser and the site is encrypted. Data in transit is harder to intercept, which is good, but it says nothing about who runs the site.
  2. Know that scammers get padlocks too. Security researchers have reported that a large share of phishing sites now display HTTPS and the lock, because the certificates are free and easy to obtain.
  3. So treat the padlock as a basic hygiene check, not proof of honesty. A site can be fully encrypted and still be amaz0n-secure-checkout.com, a complete fake.
  4. Put your trust in the domain name and the other signs below, not the lock icon. If you want the full picture of what the lock does and does not cover, read what encryption is.

The padlock was never a mark of honesty, only of encryption, but years of well-meaning advice taught people to look for it and relax. Scammers exploit exactly that reflex. A better rule of thumb: the absence of a padlock on a shopping site is a reason to leave, but its presence proves nothing at all about who you are dealing with.

Check who is behind the site

Real businesses are easy to contact and have a history. Fakes are usually thin, new, and vague.

  1. Look for a genuine physical address, a working phone number, and a real customer-service email, not just a web form. Missing or fake-looking contact details are a warning.
  2. Check the domain’s age. Many fake shops are only days or weeks old. A brand-new site selling big-name goods cheaply deserves serious suspicion.
  3. Read the returns, shipping, and privacy policies. Legitimate stores spell these out clearly. Scam sites often have missing, copied, or nonsensical policy pages.
  4. Watch for sloppy spelling, broken English, and odd formatting. Professional retailers proofread their sites; hastily built fakes frequently do not.
  5. Reverse-search a product photo. If the same image shows up on dozens of unrelated sites, it may have been stolen, a sign the shop is not what it claims.
  6. Be cautious of a site that only offers a contact form and a generic free email address, with no company name, registration number, or social presence that checks out. Real retailers rarely hide who they are.

None of these signs is damning on its own, a legitimate small shop might have a plain policy page or a new domain. But they add up. If a site is new, hard to contact, riddled with errors, and using photos that appear everywhere else, the picture that forms is not a bargain, it is a trap being set.

Spot price and payment red flags

How a site prices and takes payment often reveals its true intent faster than anything else.

  1. Compare prices against several known retailers. A sought-after item at a fraction of its normal price, especially with a ticking countdown urging you to hurry, is a classic trap. If it seems too good to be true, it is.
  2. Be alarmed by unusual payment demands. Insisting on gift cards, cryptocurrency, bank wire transfers, or a payment app’s friends-and-family option is a huge red flag, because those methods are hard to reverse and leave you unprotected.
  3. Prefer paying by credit card or a reputable checkout you recognize, since these come with buyer protection if things go wrong.
  4. Watch for a checkout that suddenly redirects you to an unfamiliar payment page, or asks for more than it should, such as your full date of birth or ID for a small purchase. Over-collection of personal data is a warning in itself.
  5. Never enter card details on a site you are not confident about. If something nags at you, stop. There will always be another seller.

Scammers engineer urgency on purpose, the ticking timer, the “only two left,” the one-day-only price, because a hurried shopper does not stop to check the domain or the payment method. Recognizing that pressure for what it is gives you back the few seconds you need to think clearly. A real deal can wait for you to look it over; a scam cannot afford to.

Verify, and report fakes you find

A final round of checks, and knowing where to report, protects both you and the next shopper.

  1. Search the store’s name alongside words like scam, reviews, or complaints, and read independent results rather than testimonials on the site itself. Learn to tell real feedback from planted praise in our guide to spotting fake reviews.
  2. If you have already bought something and suspect fraud, contact your bank or card issuer quickly to try to stop or reverse the payment, and change any password you reused.
  3. Report the fake website to the Federal Trade Commission at reportfraud.ftc.gov. You will receive a tracking number and guidance, and your report feeds a database used by law enforcement across the country.
  4. Watch your statements and accounts afterward. If your details were exposed, stay alert for follow-on scams and consider the steps in our explainer on what a data breach is.
  5. Warn the people around you if the fake impersonated a well-known brand. Scam shops spread through shared links and social ads, and a quick heads-up can stop a friend making the same mistake.

Reporting can feel pointless when the money is already gone, but it is not. Each report adds detail that helps investigators spot patterns, shut down payment channels, and sometimes recover funds. It also feeds the warnings that protect the next shopper. Taking two minutes to file one turns your bad experience into something that helps the wider public.

None of these checks takes long, and you do not need every single one to flag a fake. Usually one glaring sign, a lookalike domain, an impossible price, or a demand for gift cards, is enough to walk away. Slow down for the few seconds it takes to look properly, and the vast majority of fake shops become easy to avoid.