Is this website a scam? How to check any site in 2 minutes

You can usually tell whether a website is a scam in about two minutes. Check how old the domain is, who runs the shop and how it wants to be paid, and leave if any of those fails. "Is this website a scam?" is usually asked with a cart already full. The good news: most fake shops fail a short, boring check. This is the routine we would run on any store we had never heard of. Two minutes, no account, no tools you have to install.

Before we continue, please sponsor us by using our links if you intent to buy something. This way we can keep our service working as it costs us money. Coolblue DE, G DATA DE, ESET NL, Kaspersky ES, Amazon Prime

Step 1: Read the address bar, slowly

Look at the domain, not the page. Scammers rent a domain that looks like a brand you know and put a polished shop on it. Check the spelling letter by letter (adidas-outlet-us.shop is not Adidas), and be wary of odd endings such as .shop, .top, .xyz or .store combined with a famous brand name.

The padlock means the connection is encrypted. It says nothing about who is on the other end. Fake shops have padlocks too, because certificates are free.

Step 2: Find out how old the domain is

This is the single strongest signal. Real shops accumulate history; scam shops are created, used for a few weeks, and dropped. Search "whois" plus the domain, or use any WHOIS lookup, and read the creation date.

• Registered in the last few months and selling branded goods at a discount: leave.
• Under a year old: possible, but every other step now has to pass.
• Several years old: a good sign, not a guarantee. Aged domains get bought and reused.

Step 3: Find the company behind the shop

A real store tells you who runs it: a legal name, a physical address, a company registration number, and a way to reach a person. Open the "About" and "Contact" pages and look for all four. A contact form with no address, a free webmail address, or an address that turns out to be a parcel locker are the classic gaps.

If there is a registration number, check it in the official register for that country. If the company exists but sells something unrelated, or was set up last month, treat the shop as unverified.

Step 4: Check how they want to be paid

Go to the checkout without buying and look at the payment options. Card payments and PayPal give you a route to get money back. Bank transfer, cryptocurrency, gift cards, or "friends and family" transfers do not. A shop that only accepts the second group has chosen methods you cannot reverse. That choice tells you what you need to know.

Step 5: Compare the price with the market

Search the exact product name and look at what established retailers charge. Sixty or seventy percent off a current model of a known brand is not a deal; it is bait. Margins on real branded goods do not stretch that far, and genuine clearance sales happen on the brand's own site or at retailers you already know.

Step 6: Read reviews somewhere the shop does not control

Search the shop's name together with "scam", "reviews" and "not delivered". Ignore the testimonials on the site itself. On review platforms, watch the pattern rather than the score: a wall of five-star reviews posted in the same week, all in the same tone, is a fabricated wall, and it usually sits on top of a handful of one-star reviews that say "never arrived". We wrote a separate guide on how to spot fake reviews.

Step 7: Paste it into a checker

A checker does steps 1, 2, 3 and 6 for you in one go and shows its sources. Paste the store link into the HasTrust scam checker and you get a trust score, the domain age, company-register lookups, lookalike-domain detection and any fraud reports we found, plus a plain "buy" or "skip" bottom line. Read how the score works before you rely on it, and treat any tool as one more source, not a verdict. If the checker and your own two minutes disagree, trust the red flag.

Is this website a scam?

You cannot tell from how a site looks, but you can tell in about two minutes from the checks above: a scam site almost always fails on domain age, on missing company details, or on how it wants to be paid. Real shops pass every step; fake ones rarely survive more than two of them.

Design proves nothing either way. Scam shops copy product photos, logos and layouts from real stores, so a professional look and a padlock are exactly what you should expect from both. Judge the boring details — the domain, the company, the payment methods — not the polish.

Is this website legit?

A website is legit when it passes the checks above: the domain matches who it claims to be, it has some history, a named company with a real address stands behind it, it accepts payments you can reverse, its prices match the market, and independent reviews say orders actually arrive. "Is it legit", "is it a scam" and "is it legitimate" are the same question asked three ways, and the same two-minute routine answers all of them.

No single check proves a site is legit on its own. Judge the pattern: several green signals together are reassuring, but one hard red flag — an unreversible-only checkout, a weeks-old domain, no company behind the shop — outweighs everything else on the page.

Is this website safe?

"Safe" is really two questions — is the connection safe, and is the business real — and the padlock only answers the first. A site can encrypt your card details perfectly and still never ship anything, so run the full check above before you treat any site as safe to buy from.

If your browser shows a full-page warning before the site loads, do not click through it; that warning is based on reports about the site itself. But the absence of a warning is not an endorsement — new scam sites simply have not been reported yet, which is exactly why the domain-age check in step 2 matters.

Is there an "is this website safe" or "is this website legit" checker?

Yes: paste the link into the HasTrust scam checker and it runs the domain, company and review checks from this guide for you in one go. You get a trust score and a plain "buy" or "skip" bottom line, with the sources it used shown next to it.

A scam checker, a legit checker and a safety checker are the same tool under different names. Whichever one you use, look at the reasons behind the score rather than the number alone, and still do step 4 yourself, because only you can see which payment options the checkout really offers.

No checker can vouch for a site nobody has reported yet. If the result looks clean but the domain is weeks old or the price is too good to be true, the red flag wins.

Is this a good website to buy from?

A website is a good place to buy from when it passes every step above and you can pay by card or PayPal. Passing the checks makes a site believable; a reversible payment method is what protects you if something still goes wrong.

For a first order, keep it small, keep the screenshots, and see whether the goods arrive as described. A shop you have tested once with a small order is a much safer bet the second time.

Is this a legitimate website if it is not a shop?

The same checks work for service sites, law firms, recovery services and investment platforms: the domain, its age, the company behind it and how it wants to be paid. Only the price check changes, because there is no product to compare.

For a professional firm, a "Team" or "About" page with names and photos is not proof on its own, because names and photos are easy to copy. Look for a registration number you can check in the official register for that country, an address that is a real office, and contact details that go beyond a web form. If the people listed cannot be found anywhere except on that site, treat it as unverified.

Be most careful when the site contacted you first, or asks for an upfront fee before doing any work. Those are the situations where the full routine matters most.

Is this website safe for buying app coins, game credits or memberships?

Be extra careful: the safest place to buy coins, credits or memberships is inside the official app or on the platform's own site, not on a third-party site offering them cheaper. Digital goods are delivered instantly or not at all, so there is little to show for your money if the seller turns out to be unverified.

If you still consider a third-party site, run the full routine: domain age, the company behind it, and how it wants to be paid. Never hand over your account password or a login code so a site can "deliver" credits, because that gives whoever runs the site control of your account.

For memberships and subscriptions, read the billing terms before paying: how much, how often, and how to cancel. If you cannot find a clear way to cancel, or the price at checkout differs from the one advertised, stop there.

How to check a website when you only have an email address

Look at the part after the @: if it is a business domain, run the same checks on that domain; if it is a free webmail address, that is exactly the gap step 3 warns about. A real shop normally writes to you from its own domain.

If you only have a name or a fragment of one, search it together with "scam", "reviews" and "not delivered", as in step 6. Find the shop's website by typing the name into a search engine yourself rather than clicking a link in the email, and check that the email domain matches the website domain.

Do not send card details, passwords or codes by email in reply to a message you did not expect. A real business can be reached through the contact details on its own site, found by you.

How to check one specific link from an ad, a text or an email

Check the bare domain, not the whole link: ignore everything after the first slash, and ignore any long tail of random-looking letters and numbers after a "?" — that part is ad-tracking code, and it tells you nothing about the shop. The part that matters is the last two pieces before the first slash, read letter by letter as in step 1.

A prefix such as cart., my. or shop. in front of a domain is a subdomain of that domain, so run the checks on the main domain behind it. The reverse pattern is a warning sign: a store that lives on a subdomain of a hosting provider, a link-shortener or a click-tracking domain, or on a domain made of random letters, has not even bought its own address — treat it like a domain registered weeks ago.

If a link from a message or an ad lands you straight on a sign-in page asking for a password, card details or account codes, close it and type the address you already know into the browser yourself. Real services survive that detour; lookalike login pages depend on you arriving through the link. And a link from a social media ad deserves the full routine, not a shortcut — the ad platform sold the space, it did not vet the shop.

One more pattern worth naming: sites that promise to recover money you already lost, usually for an upfront fee. Run them through exactly the same checks as any shop, because paying in advance to "recover" funds is itself a payment you may never see again, and the routes that actually work start with your own bank or card issuer.

Trading and investment platforms that arrive the same way get the same routine. Promised returns are not a signal either way; what matters is who runs the site, how old the domain is, and whether the only way in is a deposit you cannot reverse.

Signs that end the check immediately

• A countdown timer or "only 2 left" on every product.
• Prices far below any established retailer for current, branded stock.
• Bank transfer, crypto or gift cards as the only way to pay.
• No company name and no physical address anywhere on the site.
• Product photos that appear on other shops under different names (a reverse image search shows this in seconds).
• A domain registered weeks ago.

Still unsure, but the shop passed?

Buy something small first, pay by card or PayPal, and screenshot the product page, the price and the order confirmation. Real shops survive that test without noticing. Fake ones show themselves on the first order.

If you already paid

Act the same day. Card and PayPal payments can be disputed, bank transfers can sometimes be recalled if you are fast, and reporting the shop helps the next person. The steps, deadlines and template letters are in our guide on what to do after paying a scam webshop.