Safe Browsing & Fake Websites
Scammers build websites that look exactly like your bank, a store, a government agency or a software download page. They lure you with search ads, texts and emails, then steal your password, card number or install malware. A few habits make fake sites much easier to spot.
- Everyone
Check the web address
- Read the address bar carefully. Fake sites use lookalikes such as arnazon.com, paypal-secure-login.com or extra words added to a real name.
- The real domain is the part just before the first single slash. In login.yourbank.com.verify-account.net, the real site is verify-account.net.
- Government sites in the U.S. end in .gov. Sites that charge you for free government services, like passports or EINs, are often fakes.
- Type addresses you use often, or save them as bookmarks, instead of clicking links.
Be careful with search results
Scammers buy sponsored ads that appear at the top of search results for banks, software and customer service numbers. Scroll past the ads, or go straight to the company’s official site. Never call a support number from a pop-up or a random search result. See Tech Support Scams.
The padlock isn’t a safety badge
The padlock (HTTPS) only means the connection is encrypted. Scam sites can have a padlock too. Never enter passwords or card numbers on a site without HTTPS, but don’t trust a site just because it has one.
Fake virus warnings
- Don’t call numbers on pop-ups that say your computer is infected or locked.
- Don’t download “cleaner” software a pop-up offers.
- Don’t let anyone take remote control of your computer after a pop-up.
Close the browser tab or the whole browser. If it won’t close, restart the computer.
Downloads and extensions
- Download software only from the maker’s official site or your device’s app store.
- Install only browser extensions you need, from well-known publishers, and remove ones you don’t use. Extensions can read everything you do in the browser.
- Keep your browser and operating system updated. See Software Updates.
- Leave your browser’s built-in protection against dangerous sites turned on.
A password manager helps
A password manager fills in your password only on the real site it was saved for. If it doesn’t offer to fill in, stop and check the address. See Password Managers.
Before you enter a password or card number
- I got here by typing the address or using a bookmark, not from a text or ad
- The domain is spelled exactly right
- The page didn’t pressure me with countdowns or threats
- My password manager recognized the site
- The deal or offer isn’t too good to be true. See Online Shopping
Standards & references
Last updated: