Design is easy to reproduce
Logos, colours, product images, reviews and policy text can be copied from a genuine site.
Technology, platforms and channels
Is this website genuine?
A website can look professional, use HTTPS and copy a real organisation while being controlled by someone else. Check the exact domain, ownership context, purpose and route—not design quality alone.
Page P-004Guidance pageReviewed 29 August 2026
Key Guidance
Do not enter details or pay while unsure. Leave the link you were given, find the organisation independently and compare the exact web address and process with its published service.
Start with Key Guidance for the short answer. Then read the sections that match what happened and what you need to do.
Guided route 1
Something I found or received worries me
Current position: Step 4 of 4 — Check the destination. Read the guides in the order shown.
Understand the issue
Why this matters to you
The padlock protects the connection to the site shown in the address bar. It does not prove that the site belongs to the organisation it claims to represent or that the offer is honest.
Domains can be nearly identical
Added words, swapped letters, misleading subdomains and unfamiliar endings can make a different address look expected.
Search and adverts can lead to false sites
Prominent placement does not authenticate the operator or approve the service.
A real site can still host risk
Compromised pages, third-party sellers or misleading content can exist on otherwise genuine platforms.
Consequences and movement
What may happen next
Test the site in layers. No single technical sign gives a complete verdict, but inconsistencies across identity, purpose and payment can reveal the wrong route.
Read the address from right to left
Identify the registered domain before any slash and tell the difference between it and brand words placed elsewhere in the address.
Reconnect to the organisation
Find the official site through a saved record, trusted document or independent search and compare the service and contact details.
Test the promised process
Ask whether the real organisation offers this product, refund, login, application or payment through this route.
Inspect the destination of value
Unexpected bank details, cryptocurrency, gift cards, remote-access software or identity uploads require a separate check.
Practical response
What you should do
Checking is safest before logging in, downloading, paying or supplying identity information.
- Do not continue from the supplied linkClose the page and reach the service independently through a known address or official app.
- Check the exact domainLook for spelling changes, extra words, misleading subdomains and a destination that does not match the claimed organisation.
- Compare contact and policy detailsUse independently published information. Copied addresses and company numbers are not proof by themselves.
- Question the offer and urgencyAn exceptional discount, expiring refund, account threat or scarce item may create pressure that stops careful checking.
- Protect details already enteredChange reused passwords, contact the bank for payment data and remove unfamiliar account sessions or downloads.
- Report the siteSend suspicious websites to the national cyber reporting route and report misleading adverts or actual fraud through the relevant service.
Look more closely
A polished website is a destination, not proof
Design, security icons and professional wording show how a site is presented, not who operates it. Check how you reached it, what it requests and whether an independent official route leads to the same service.
A message, search result, advert or social post leads to the page.
A bargain, refund, account warning, application or exclusive access creates relevance.
Design, HTTPS, reviews, company details and copied language create legitimacy.
Forms, checkout, login and support keep every action within the site.
Leaving the page and finding the service independently tests whether the route survives scrutiny.
Selected history
Historical cases and lasting lessons
Government-service imitation sites
Lookalike sites have charged for public services or captured details while appearing to be official.
Lasting lesson: Use GOV.UK to find official government services and their real price and process.
False shopping and login pages
Copied storefronts and sign-in pages use familiar design to collect payments or sign-in details.
Lasting lesson: The address and independently confirmed route matter more than visual similarity.
Transferable understanding
Patterns over time
The link preselects the evidence
A sender-controlled route can show the site, reviews, contact page and reassurance the user is expected to find.
HTTPS is misunderstood as approval
Encryption secures the connection but does not authenticate the business claim or offer.
Copied detail creates a complete world
Policies, staff profiles, addresses and testimonials may all originate from genuine sources without belonging to the site.
Payment reveals the real boundary
A familiar site that redirects to an unrelated account, wallet or unusual method has changed the transaction path.
Plain-language answers
Common questions
Does the padlock mean the website is genuine?
No. It means the connection is encrypted to the domain shown. It does not approve the operator or offer.
Can a scam website appear in search results?
Yes. Search placement and advertising are discovery mechanisms, not guarantees of legitimacy.
Does a company number prove the website belongs to that company?
No. Compare the domain and contact details through independent official records and contact the company directly.
What if I entered a password but did not pay?
Change it at once on the genuine service and anywhere it was reused, then review sessions, recovery details and two-step verification.
Report the site and protect the information it received
Report suspicious websites through the national cyber route. Contact the bank, card provider or genuine account service at once when payment or login information was entered.
Scamology Insights
See how a website becomes the controlled Path
These learning resources can help separate polished presentation from ownership, authority and the destination of money or information. Links are intentionally withheld in this production version.
Guided route 1 · Step 4 of 4
You have reached the end of this route
Return to the route overview or browse the full Guidance Library.
Continue understanding
Explore related guidance
Evidence and currency