Computerhelp4all logo Articles AboutTopicsQuizzesComputer Questions & AnswersComputer Terms & DefinitionsActivitiesContact

How To Tell If A Website Is Legitimate? - 10 Ways To Tell If A Website Is Legitimate

How To Tell If A Website Is Legitimate

Date First Published: 26th March 2023

Topic: Cybersecurity

Subtopic: Threats To Individuals

Computer Questions & Answers

Difficulty: Easy

Difficulty Level: 3/10

Learn about how to tell if a website is legitimate in this article.

Are you wondering whether the website you are visiting is legitimate or a scam? There are some signs and online tools that indicate whether a website is likely to be legitimate or a scam. Especially before buying online, it is important to make sure that the website is legitimate. If it wasn't legitimate, you might end up paying for a product or service that you never actually receive. Below are the 10 ways to tell whether a website is legitimate or not.

1. Carefully Look At The Domain Name Of The Website

The domain name says a lot about a website. It consists of the connection protocol (http:// or https://), the custom name (e.g. "youtube"), and the TLD ("com", "net", "org"). Even if the connection is secure, the following signs indicate that a website is more likely to be illegitimate:

  • Domain name not matching the website. For example, if the domain name contains a well-known product, like "", but the website has nothing to do with Apple iPhones and is not the official website, this is an immediate sign that the website is not legitimate.
  • Domain names that impersonate well-known businesses or misspell well-known business names (e.g. "", "", "", "".)
  • TLDs like .tk, .ml, .cf, .ga, and .gq. These can be used by legitimate sites, but are commonly used by scam sites and tend to not be trustworthy.
  • Very long and complex URLs (e.g. "")
  • Lots of unnecessary hyphens in the domain name (e.g.
  • Using the legitimate name as a subdomain name, but with the domain name being different (e.g. "")

2. Look For The Padlock

If you see the padlock icon in your address bar, it means that the connection to the website is secure and it uses HTTPS over SSL/TLS to encrypt data so that it cannot be read if intercepted. Most browsers will draw attention to websites that do not use the padlock by displaying a 'not secure' warning in the address bar.

Without the padlock, all information is sent in plain text and could be read by someone that is monitoring the connection. As a result, sensitive information could go to the wrong person and it could cause a data breach. The reason why the padlock is a sign that a website is legitimate is that the HTTPS security certificate is not something that a scam site would usually bother with.

However, the padlock sign does not always mean that a website is legitimate. Scam sites can still use the padlock, so don't rely on the padlock itself. Instead, you should look at the domain name and check that it matches the name of the website you are expecting. The padlock sign just means that the connection to the website is encrypted.

3. Check For Spelling and Grammatical Errors On The Website

Take a look at the content of the site. If you notice a large number of spelling and grammatical errors on the website or awkward phrasing, it is more likely to be a scam site. This is because lots of mistakes suggest that the website has been rushed by someone without them properly checking their work. However, good spelling and grammar do not mean that a website is legitimate as scam sites can still have no spelling and grammatical errors, so don't rely on good spelling and grammar itself to determine whether a site is trustworthy.

4. Look For Excessive Ads

Nearly all websites have some ads to make money, but if the website is flooded with ads all over the page, the ads suddenly play sound without your permission, or they cannot be differentiated from the content, then it is more likely to be a scam site. Watch out for the following types of ads:

  • Ads that require you to take a survey to get a chance of winning a free product or good before continuing.
  • Ads that redirect you to another page.
  • Continuous popup ads that take up the whole page and reappear after closing them.
  • Popup ads with no closing button.
  • Ads that ask you to enable browser notifications and only display the content of the page or download a file if you enable them.
  • Offers that look too good to be true.

5. Check That The Website Has The Important Pages

Nearly all websites have an "about" page, a contact page, a privacy policy, and a terms of use page, which are usually accessible by clicking on links in the footer. If it is a legitimate online shopping website, it should have pages explaining the returns policy, shipping, and payment methods. If the website you are visiting does not have these pages, then that is an immediate sign that the website you are visiting is not legitimate.

6. Look For Reviews Online

There are some review websites, like Trustpilot, where users can share what they think of another site, the quality of a product, and whether the site is legitimate. But, be careful when looking at the reviews. If they all look the same, are all posted within a very short time span, are vague and do not go into much detail, then they might be fake. Although Trustpilot has been taking action against fake reviews, it cannot detect every possible fake review and there still might be some fake reviews on it. Note that this method of checking whether a website is legitimate or not might not always work as there may not be any reviews on Trustpilot, especially if the website has been recently launched.

It is not recommended to rely on the reviews on the website itself to determine whether a website is legitimate. Scam sites often fill their reviews section with fake positive reviews, made-up names of people, photos from random sources, and text that is copied word-for-word from other websites. On websites like Trustpilot and ScamAdviser, the reviews cannot be deleted by the company itself, so checking reviews on external sites is a better way of getting a clearer idea of what other people think about a website.

7. Check The Design Quality

Carefully look at how the website is designed. If it contains lots of awkward layouts, low-resolution or blurry images, the elements have a lack of contrast, or there are lots of design errors on the site, like broken navigation or design inconsistencies, this suggests that the website has been rushed. Scammers do not want to take long to build fake websites and move quickly from website to another.

8. Consider Whether What The Site Offers Is Too Good To Be True

When buying online, always consider whether what the site offers is too good to be true. Does it offer products at extremely low prices? For example, does it offer an iPad that normally costs £300 for £100? You should be wary of offers like this. Some websites use ridiculously low prices to get people to quickly buy fake products that they will never receive. They might claim to offer one thing, like an iPad that normally costs £300 for £100, but put what they actually offer, like an accessory for an iPad in very small text, which will mislead people.

9. Use A Site Checker

You can use a site checker, like ScamAdviser, Google Transparency Report, Norton SafeWeb, or Sucuri SiteCheck to help give an idea of whether a website is legitimate. These consider multiple factors and once the check is finished, it will display an overall score. They use complex algorithms to generate the score. Whilst they can give you an idea of whether a website is legitimate or not, no site checker is 100% accurate, so do not rely on a site checker itself.

10. Check The Domain Age

The domain age is how long the domain name has been registered. Checking the domain age is useful as it helps give an idea of whether the website has been running for a good amount of time. Scam sites often have a very young domain age as they are put up early and rarely stay up for long periods of time because customers start posting negative reviews and they get negative feedback on social media, leading to people staying away from the website. Finding out the domain age of a website is easy. You can perform a WHOIS lookup, which will tell you how long the website has been active.


  • Is there anything that you disagree with on this page?
  • Are there any spelling, grammatical, or punctuation errors on this page?
  • Are there any broken links or design errors on this page?

If so, it is important that you tell me as soon as possible on this page.

Rate This Article

0.0 / 5

0 total ratings






Rate this article