How to spot a fake website or shop

Fake websites copy real banks, shops and government services. Some steal your login, others take your money and send nothing. Run through these seven checks before you log in or pay.

1. How did you get here?

   Links in texts, emails, social media posts and adverts are the most common route to fake sites. For your bank, government services and big retailers, type the address yourself or use the official app.

2. Read the address carefully

   Look at the part just before .co.uk or .com. yourbank.co.uk is genuine. yourbank.co.uk.secure-login.net and yourbank-help.com aren't. Watch for swapped or added letters.

3. Don't rely on the padlock

   The padlock (https) only means the connection is encrypted. Scam sites have padlocks too.

4. Is the price too good to be true?

   Big discounts on designer goods, electronics or sold-out tickets are a major warning sign.

5. Look for real contact details

   A UK shop should show a company name, a physical address, and clear returns and refund terms. Be cautious if there's only a contact form.

6. Check what others say

   Search the shop's name plus "scam" or "reviews" on several independent sites. Brand new websites with no history are riskier. Get Safe Online's Check a website tool can help.

7. Look at how you're asked to pay

   Be very wary if you're asked to pay by bank transfer, crypto, gift cards or a money transfer service. A credit card gives you the most protection.

Government services

Official UK government services are on gov.uk addresses. Copycat sites charge extra fees for passports, driving licences, travel authorisations and tax returns. Search carefully and avoid adverts at the top of search results.

Last reviewed: October 2026