SCAM AWARENESS EDUCATION SERIES

Is website legit or a scam without relying on clickable links?

Scammers use advanced AI to mimic professional branding. This makes it harder than ever to spot a fake. However, they still leave digital “fingerprints.”

---

1. Scrutinize the Address Bar

The URL (the website address at the top) is the most honest part of a site. Scammers can’t own a real brand’s exact domain, so they use “Lookalike Domains.”

• Character Swaps: Look for a zero instead of an “O” (amaz0n.com) or a lowercase “L” instead of an uppercase “i.”

• The “Root” Domain: Only the words immediately before the “.com” or “.org” matter. For example, https://www.google.com/search?q=support-apple.security-check.com is actually the website https://www.google.com/search?q=security-check.com, not Apple.

• Strange Extensions: Be wary of sites ending in .top, .xyz, .biz, or .shop if you expect a major brand or a bank.

2. Verify “The Lock” is Only Half the Story

You may have heard that the padlock icon or HTTPS means a site is safe. This is no longer enough.

• Encryption ≠ Legitimacy: HTTPS only means the connection is private. Scammers use free security certificates to get that padlock icon and look professional.

• Check the Certificate: Click the padlock and look for “Connection is secure,” then “Certificate is valid.” A truly legit site (like a bank) often has an “Extended Validation” certificate that lists the actual company name and location.

3. Identify AI-Generated Content

Scammers now use AI to write their text, but it often feels “off.”

• The “Uncanny Valley” of Writing: Look for repetitive phrasing, overly formal language (like using “kindly” in every sentence), or a lack of specific details about the company’s history.

• Broken Layouts: Check the footer (the bottom of the page). Scam sites often have broken social media icons that don’t lead anywhere or “Privacy Policy” pages that are just empty or filled with gibberish.

4. Investigate the “Contact Us” Page

A legitimate business wants to be found. A scammer wants to disappear.

• Physical Address: Copy the address into a map search. If it leads to a residential house, a vacant lot, or a PO Box in a different country, walk away.

• Generic Emails: Legitimate companies use branded emails (support@company.com). If the contact email is a Gmail, Yahoo, or Outlook address, it is likely a scam.

5. Watch for “Irreversible” Payment Methods

If a site asks you to pay using methods that cannot be charged back, it is almost certainly a scam.

• The Big Three Red Flags: Cryptocurrency (Bitcoin/Ethereum), Gift Cards (iTunes/Amazon), or Wire Transfers (Western Union/MoneyGram).

• P2P Apps for Retail: Be suspicious if a retail website asks you to pay via the “Friends and Family” option on Venmo, CashApp, or Zelle. These offer zero buyer protection.

6. Use Independent Verification

Never trust what the website says about itself.

• Search for Complaints: Open a new tab and search the website name plus the word “scam” or “reviews.”

• Check the Age: Use a “Whois” lookup tool (you can find these by searching “Whois domain lookup”). If a company claims to have been around for years but the website was registered only two weeks ago, it’s a scam.

---

Pro Tip: If you received an email or text with a link, do not click it. Instead, manually type the official website address into your browser. This bypasses “quishing” (QR code phishing) and malicious redirects entirely.