How do I check if a website is safe?

How do I read a web address correctly?

The important part of a web address is what appears immediately before the first single slash. Read backwards from that point. In 'account-secure.paypal.verify-login.com/help', the real domain is verify-login.com, not PayPal. Scammers pack trusted brand names into subdomains and paths because most people read left to right and stop at the first familiar word.

• Watch for hyphens and extra words added to a brand name.
• Watch for character swaps: rn for m, l for I, 0 for o.
• Be cautious with unusual endings on shopping sites, especially newly created ones.
• Shortened links hide the destination entirely — expand them with a link checker before visiting.

What else should I check before buying?

1. 1Find a real phone number and physical address, then verify them independently — fake sites reuse stock addresses.
2. 2Check payment methods. Legitimate retailers accept credit cards; requests for Zelle, wire, crypto, or gift cards are disqualifying.
3. 3Search the store's name plus 'scam' or 'reviews' in a separate tab. Reviews on the site itself are worthless.
4. 4Look at prices. Deep discounts on hard-to-find items are the oldest bait there is.
5. 5Read the returns and shipping pages. Fake stores often have vague, copied, or missing policies.
6. 6Check how old the site is — a brand-new domain selling premium goods deserves suspicion.

Safer habits that prevent the problem

• Reach sites by typing the address or using a bookmark rather than clicking links in email or ads.
• Pay with a credit card, which offers the strongest dispute rights.
• Use a password manager — if it does not offer to fill your password, you may be on a lookalike domain.
• Keep your browser updated so its built-in warnings work.
• Check unfamiliar links with our free link checker before opening them.