{"id":5658,"date":"2022-01-23T12:26:56","date_gmt":"2022-01-23T12:26:56","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/23\/how-to-spot-a-fraudulent-website\/"},"modified":"2022-01-23T12:26:56","modified_gmt":"2022-01-23T12:26:56","slug":"how-to-spot-a-fraudulent-website","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/23\/how-to-spot-a-fraudulent-website\/","title":{"rendered":"How to Spot a Fraudulent Website"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n
\"Rusty
Risqi Rizal\/Shutterstock.com<\/a><\/span><\/figcaption><\/figure>\n

The internet is home to roughly 1.7 billion websites<\/a>. Unfortunately, many of these websites live only to scam you out of your personal data or money. Here are a few signs to look out for to spot a fraudulent website.<\/p>\n

Double-Check the URL Name<\/h2>\n

The first thing you should do before visiting a site is ensure that the domain name is the one you intend to visit. Fraudsters create fake sites masquerading as an official entity, usually in the form of an organization you would likely recognize, such as Amazon, PayPal, or Wal-Mart. Sometimes the difference between the real site\u2019s name and the fraudulent site\u2019s name is almost unnoticeable. For example, the cybercriminal may build a site using rnicrosoft.com<\/em>, but you think you\u2019re visiting microsoft.com<\/em>.<\/p>\n

There are two basic ways the cybercriminal, or \u201cthreat actor,\u201d gets you to visit the fraudulent site. The first way is by a method known as \u201cphishing<\/a>.\u201d Phishing is a form of cyberattack that is delivered mainly by email. The threat actor tries to entice you to click a link in the email that will then redirect you to a fraudulent copy of the real website.<\/p>\n

Another way the threat actor may get you to visit the fraudulent site is by a method known as \u201ctyposquatting<\/a>.\u201d\u00a0Typosquatting uses common misspellings of domain names (for example, amazom.com) to trick users into visiting fraudulent websites. You think you entered the domain name correctly, but you\u2019re actually visiting a fraudulent copy of the genuine site. If you\u2019re lucky, your web browser will warn you.<\/p>\n

\"A<\/p>\n

Regardless of how you get to the site, once you log in to this fraudulent website, the threat actor will harvest your login credentials and other personal data, such as your credit card information, and then use those credentials themselves on the actual website or any other website where you\u2019re using the same login credentials<\/a>.<\/p>\n

RELATED:<\/strong> Why You Should Use a Password Manager, and How to Get Started<\/em><\/strong><\/a><\/p>\n

The first and most basic method of spotting a fraudulent website is to make sure the domain name is the one you truly intend to visit.<\/p>\n

Look For the Padlock, Then Look Harder<\/h2>\n

When you visit a website, look for the padlock to the left of the URL in the address bar. This padlock indicates that the site is secured with a TLS\/SSL certificate<\/a>, which encrypts<\/a> data sent between the user and the website.<\/p>\n

\"The<\/p>\n

If the website hasn\u2019t been issued a TLS\/SSL certificate, an exclamation mark ( !<\/code> ) will appear to the left of the domain name in the address bar. If a site isn\u2019t TLS\/SSL certified, any data you send is at risk of being intercepted.<\/p>\n

The downside to this is that not all SSL certificates are authentic. These sites are usually caught pretty quickly, but it\u2019s still best to look a little harder at the padlock just to be sure. Unfortunately, you can only dig deeper if you\u2019re browsing the web using a desktop.<\/p>\n

First, click the padlock and then click \u201cConnection is Secure\u201d from the context menu.<\/p>\n

\"Click<\/p>\n

If the certificate is valid, then you\u2019ll see the \u201cCertificate is Valid\u201d text on the next menu. Go ahead and click that for more details.<\/p>\n

\"Click<\/p>\n

A new window displaying the information about the certificate will appear. You can check which site the certificate was issued to, who it was issued by, and its expiration date.<\/p>\n

\"Certificate<\/p>\n

While this won\u2019t always protect you from fraudsters, the padlock (and the certificate information) is a good indicator that you\u2019re visiting a legitimate site.<\/p>\n

RELATED:<\/strong> How to Avoid Online Scams and Fake Health Products<\/em><\/strong><\/a><\/p>\n

Check the Site\u2019s Privacy and Return Policies<\/h2>\n

Fraudulent websites generally don\u2019t go to the extent that genuine websites go to concerning privacy and return policies, if at all. For example, Amazon has a pretty thorough return policy<\/a> and privacy policy<\/a>\u00a0that details everything the customer needs to know about each respective policy.<\/p>\n

If a site has a poorly written return or privacy policy, that should raise some red flags. If a site doesn\u2019t have these policies stated on their website at all, avoid them at all costs, as the site is likely a scam site.<\/p>\n

Check For Poor Spelling, Grammar, and UI<\/h2>\n

A spelling or grammar mistake is likely to happen now and again, even on the most authoritative of websites. However, most websites have teams of professionals creating these websites. If a website looks like it was created in a day by one person, is riddled with spelling and grammar errors, and has a questionable user interface (UI)<\/a>, there\u2019s a chance that you\u2019re visiting a dangerous website.<\/p>\n

RELATED:<\/strong> How to Avoid Fake and Scammy Amazon Sellers<\/em><\/strong><\/a><\/p>\n

Use a Site Scanner<\/h2>\n

If you\u2019d like to add another layer of protection between you and fraudulent websites (and also give you a heads up if you may be visiting one), then use a site scanner such as McAfee SiteAdvisor<\/a>.<\/p>\n

These tools crawl the web and test sites for spam<\/a> and malware<\/a>. If you visit a dangerous (or potentially dangerous) site that the program determines may contain dangerous content that could harm your PC, you\u2019ll be notified and asked to confirm you still want to proceed to the site when you try to visit.<\/p>\n

\"A<\/p>\n

While site scanners are helpful in spotting a potentially fraudulent website, not all fraudulent websites will be flagged. While you use them as an extra layer of protection, still be conscious of the sites you visit.<\/p>\n

What to Do If You\u2019ve Been Scammed<\/h2>\n

If you\u2019re a victim of an online scam, there are a few measures you can take to protect yourself (and potentially protect others). What you need to do next depends on what type of information you believe the scammer may have on you.<\/p>\n

If you purchased something using your credit or debit card from the fraudulent site, the first thing you should do is call your bank immediately and report to them what happened. They\u2019ll freeze your accounts<\/a> and cards so that the threat actor can no longer purchase anything with your details.<\/p>\n

If you believe the threat actor may also have your personal information, such as your Social Security Number, date of birth, address, and so on, you\u2019ll want to\u00a0freeze your credit<\/a> so that the fraudster can\u2019t take out any loans or open any accounts in your name.<\/p>\n

Once that\u2019s taken care of, file a report with your local police, notify the Internet Crime Complaint Center (IC3),<\/a>\u00a0and report the site to Google<\/a>.<\/p>\n

RELATED:<\/strong> Privacy vs. Security: What’s the Difference?<\/em><\/strong><\/a><\/p>\n<\/div>\n