Scam websites have come a long way from the badly spelled, garish pages of a decade ago. The convincing ones now copy real brands pixel-for-pixel, run on secure connections, and turn up in search results and social ads where you would never expect a trap. Australians lose serious money to them every year. The team has spent enough time picking these sites apart to know the tells — here is how to spot one before it costs you anything.
Why scam websites are so effective now
Two things changed. First, building a polished website became trivial — a convincing fake storefront can be cloned in an afternoon. Second, scammers learned to buy their way in front of you, through search ads and social media promotions that sit right alongside legitimate results. The old advice to “look for the padlock” no longer works either: a padlock only means the connection is encrypted, not that the site is honest. Plenty of scam sites have one. You need sharper tells than that.
The warning signs of a scam website
1. The price is too good to be true
It remains the oldest tell for a reason. A sought-after product at 70% off, in stock everywhere when it is sold out everywhere else, is the bait. Scammers know a big enough discount switches off the part of your brain that asks questions. If a deal feels unbelievable, that is the warning.
2. The web address is slightly wrong
Look hard at the address bar. Scam sites lean on lookalike domains — an extra word, a hyphen, a swapped letter, or an odd ending like .shop or .online where the real brand uses .com or .com.au. “officialbrand-store.shop” is not the official brand store. When in doubt, navigate to the brand yourself rather than trusting a link.
3. There is no real way to contact anyone
Legitimate businesses want to be reachable. A scam site typically offers a lone web form, a free email address, or nothing at all — no real phone number, no physical address, no company details. A street address that turns out to be a vacant lot on a map is a dead giveaway.
4. Payment methods that cannot be reversed
This is one of the clearest signals. If a site pushes you towards bank transfers, gift cards, or cryptocurrency — or only “reveals” those options at checkout — walk away. Those payments are almost impossible to claw back, which is precisely why scammers want them. Genuine retailers take credit cards and reputable payment services that offer buyer protection.
5. Pressure, countdowns and panic
“Only 2 left!” “Offer ends in 4:59!” Manufactured urgency exists to stop you thinking. Some scam sites we have examined cross the line into outright fear — fake virus warnings, or claims you must “verify” your account immediately. We pulled one whole genre of this apart in our report on scam websites that charge you for verification: a real service never charges you to prove who you are.
6. Reviews that feel manufactured
Be sceptical of a site whose every on-page review is a glowing five stars in oddly similar language. Then check off the site — search the business name with the word “scam” or “reviews”. Real businesses leave a trail across independent review sites and forums. A site selling for months with no independent footprint anywhere is a red flag.
7. Sloppy details under the surface
The homepage might be flawless, but scammers rarely finish the job. Click into the Terms, Privacy Policy, Returns and About pages. Missing pages, placeholder text, mismatched company names, or content obviously copied from another site all point the same way.
How to check a website before you buy
If a site is new to you, a two-minute check is worth it:
- Search the business name plus “scam” or “reviews”. Other people’s bad experiences surface fast.
- Check how old the domain is. Free “whois” lookup tools show a domain’s registration date. A site claiming twenty years in business on a domain registered last month is lying.
- Test the contact details. Map the address. Call the number. Silence or a dead end tells you plenty.
- Read the fine print. Open the returns and privacy pages and actually read a few lines.
- Reverse-search the product images. Scam sites lift photos from real retailers — a reverse image search often reveals the original.
The Australian Government’s Scamwatch service publishes current scam alerts and is worth a look if anything feels off — it often names specific fake sites doing the rounds.
What to do if you have already used a scam site
If you think you have been caught, move quickly — speed genuinely matters.
- Contact your bank immediately. If you paid by card, ask about a chargeback. The sooner you call, the better your odds.
- Change your passwords. If you created an account with a password you use elsewhere, change it everywhere — reused passwords are exactly how one breach becomes many, a point we make in our piece on email security.
- Watch for follow-up scams. Once you are on a “victim” list, expect fake “recovery” services promising to retrieve your money for a fee. They are a second scam. Ignore them.
- Check your device. If the site asked you to install anything, scan your device — our guide to spotting a compromised phone walks through the signs.
- Report it. File a report with Scamwatch. It will not always recover your money, but it helps authorities track and shut these operations down.
Building the right instincts
You will not memorise a checklist before every purchase, and you do not need to. The habit that protects you is simpler: slow down. Scam websites are engineered to rush you — the discount, the countdown, the panic all exist to skip the moment where you would otherwise pause and think. Give yourself that moment. Navigate to brands directly instead of through ads. Favour retailers and payment methods you already know. And treat any deal that feels too good as a question, not an opportunity.
The most common types of scam website
Scam sites tend to fall into a few recognisable patterns. Knowing them makes the tells above click into place faster:
- Fake online stores. A whole storefront built around products that will never ship — or that arrive as cheap counterfeits. Often advertised heavily on social media.
- Brand impersonation sites. Near-perfect clones of a well-known retailer or bank on a lookalike domain, built to harvest your login or card details.
- “Verification” and fee scams. Sites that demand a small payment to verify your identity, release a prize, or unlock an account. The fee is the scam.
- Tech-support traps. Pages that throw up alarming “your device is infected” warnings and push you to call a number or install software.
- Investment and crypto schemes. Polished platforms promising guaranteed, unrealistic returns. They show fake “growth” until you try to withdraw.
Different costumes, same playbook: look legitimate, create urgency, and steer you to a payment you cannot reverse.
Frequently asked questions
Does “https” or a padlock mean a website is safe? No. It only means the connection between you and the site is encrypted. Scammers obtain those certificates easily. A padlock tells you nothing about whether the business is honest.
Can I trust a website just because it appeared in a search ad? No. Scammers buy search and social ads to sit alongside real results. An ad placement is paid for — it is not a recommendation. When in doubt, scroll to the genuine, non-sponsored result.
I only entered my email address — am I at risk? The direct risk is low, but expect more scam and phishing attempts to that address. Stay sceptical of what lands in your inbox next, and never reuse the password tied to that email elsewhere.
What is the single safest way to pay online? A credit card or a reputable payment service that offers buyer protection. Both give you a path to dispute a charge. Bank transfers, gift cards and cryptocurrency offer no such safety net.
Helping family members stay safe
Scam sites disproportionately target people who are newer to shopping online — often older relatives. If that describes someone in your life, a short, judgement-free conversation does more than any software. Agree a simple rule together: before buying from any unfamiliar site, they send you the link first. Encourage them to stick to a handful of retailers they already know, to pay only by credit card, and to treat any message creating panic or urgency as a reason to stop and ask. The aim is not to frighten anyone off the internet — it is to build the one reflex that defeats nearly every scam site: pausing before acting.
The bottom line
Scam websites succeed by looking ordinary and feeling urgent. The padlock will not save you, and neither will a slick homepage — but a slightly-wrong web address, an irreversible payment method, missing contact details and manufactured panic will give the game away every time. Take the two minutes to check, keep your money on payment methods that protect you, and when something feels off, trust that instinct. It is almost always right.
