Last month, a Reddit user posted about losing $340 to a website selling discounted Dyson vacuums. The site had professional photos, a working checkout, and even a chat widget. Everything looked normal—until the package never arrived and the domain vanished. Stories like this appear daily across consumer forums, and they're not limited to obvious knockoff sites. In 2025, the FTC reported that Americans lost over $10 billion to fraud, with online shopping scams ranking among the top categories. The question "is this site legit?" has never been more relevant.
This guide walks through a practical, step-by-step approach to verify any online business before handing over your payment details. No paranoia required—just a few minutes of due diligence that could save you hundreds.
Start With the Basics: Domain Age and Registration
One of the fastest ways to run a scam website check is to look at when the domain was registered. Fraudulent sites tend to be new—often just weeks or months old—because they get reported and taken down regularly. Legitimate businesses, by contrast, usually have domains that have been active for years.
You can check domain registration for free using WHOIS lookup tools like whois.domaintools.com or ICANN's lookup service. Look for the "Creation Date" field. If a site claims to have been operating since 2015 but the domain was registered three months ago, that's a significant red flag.
What to Look For in WHOIS Data
- Creation date: Domains under 12 months old warrant extra scrutiny
- Registrant information: Privacy protection is common, but completely blank fields can indicate hasty setup
- Expiration date: Scam sites often register for just one year; established businesses typically register for multiple years
- Registrar reputation: Some registrars are known for lax enforcement
A 2024 study by the Anti-Phishing Working Group found that 78% of phishing domains were less than one year old at the time of detection. While not every new site is fraudulent, combining domain age with other signals gives you a clearer picture.
Check Company Reviews Across Multiple Platforms
Single-source reviews can be manipulated. A business might have glowing testimonials on its own website while actual customers are posting warnings elsewhere. To properly check company reviews, you need to look at multiple independent platforms and compare what you find.
Start with the major review aggregators: Google Reviews, Trustpilot, Yelp (particularly strong for US local businesses), and the Better Business Bureau. For UK-based companies, also check Reviews.io and Feefo. Directories like Compasly aggregate reviews across sources, which can save time when you're trying to get a comprehensive view.
Reading Reviews Critically
Not all reviews are created equal. Watch for these patterns:
- Review velocity: A sudden burst of five-star reviews after months of silence often indicates purchased reviews
- Generic language: "Great product, fast shipping, would recommend!" repeated across multiple reviews suggests automation
- Verified purchase badges: Platforms like Amazon and Trustpilot mark reviews from confirmed buyers
- Response to negative reviews: How a business handles complaints reveals more than praise ever could
- Review distribution: Real businesses typically have a mix of ratings; a perfect 5.0 across hundreds of reviews is statistically unlikely
The BBB maintains complaint records even for businesses that aren't accredited. Search their database at bbb.org to see if customers have filed formal complaints and whether the business responded.
Verify Physical Address and Contact Information
Legitimate businesses provide real contact information because they want customers to reach them. Scam operations hide behind contact forms and generic email addresses because accountability is their enemy.
Look for a physical address on the website's Contact or About page. Then verify it actually exists using Google Maps Street View. In 2023, a wave of scam furniture stores used addresses that turned out to be empty lots or residential homes. A quick Street View check would have revealed the deception instantly.
Phone numbers deserve the same scrutiny. Call the number during business hours. A real business will answer or return calls. If you reach a disconnected number, a generic voicemail with no company name, or an overseas call center that can't answer basic questions about the products, proceed with extreme caution.
Red Flags in Contact Information
- Only a contact form—no email address or phone number
- Email addresses using free providers (gmail, yahoo) rather than the company domain
- Address that doesn't match the claimed business location or type
- Phone number with an area code that doesn't match the stated location
- No response to pre-sale inquiries within 48 hours
Examine Payment Methods and Security
How a website handles payments tells you a lot about its legitimacy. Secure, established businesses offer multiple payment options and use industry-standard encryption. Scam sites often push customers toward irreversible payment methods.
First, check for HTTPS in the URL bar. The padlock icon indicates the connection is encrypted. While HTTPS alone doesn't guarantee legitimacy—scammers can obtain SSL certificates too—its absence on any checkout page is an automatic disqualifier in 2026.
Payment method diversity matters. Credit cards and PayPal offer buyer protection; if something goes wrong, you can dispute the charge. Wire transfers, cryptocurrency, gift cards, and payment apps like Zelle offer little to no recourse. The FTC specifically warns that any business demanding payment via gift card is almost certainly a scam.
Safer Payment Practices
Even on sites that appear legitimate, protect yourself:
- Use credit cards rather than debit cards—credit cards have stronger fraud protection under the Fair Credit Billing Act
- Consider virtual card numbers from services like Privacy.com for first-time purchases
- Never save payment information on unfamiliar sites
- Check your statements within a few days of purchase
- Be wary of sites that only accept bank transfers or cryptocurrency
PayPal's Purchase Protection covers eligible purchases up to $20,000. If you're uncertain about a seller, routing the transaction through PayPal adds a layer of recourse.
Research the Business Entity Itself
In most jurisdictions, legitimate businesses are registered with government authorities. This registration creates a paper trail you can verify.
For US companies, check the Secretary of State's business database in the state where the company claims to be incorporated. California's bizfileportal.sos.ca.gov, Delaware's icis.corp.delaware.gov, and similar portals let you search for registered businesses for free. You'll see the registration date, registered agent, and whether the business is in good standing.
UK businesses can be verified through Companies House at find-and-update.company-information.service.gov.uk. This shows incorporation date, registered office, director names, and annual filing history. A company that hasn't filed required documents may be dormant or fraudulent.
Australian businesses appear on the ABN Lookup at abr.business.gov.au. Canadian businesses can be searched through federal (ised-isde.canada.ca) or provincial registries depending on where they're incorporated.
What Registration Tells You
Finding a business in official registries doesn't guarantee ethical behavior, but it establishes that the entity legally exists and has provided identifying information to authorities. If a website claims to be "XYZ Ltd" but no such company appears in the relevant registry, that's a serious warning sign.
Use Dedicated Scam-Detection Tools
Several free tools exist specifically to help you determine if a site is legit. These aggregate data points and flag known problematic domains.
Google's Safe Browsing tool (transparencyreport.google.com/safe-browsing/search) checks URLs against Google's database of unsafe sites. ScamAdviser.com provides trust scores based on domain age, location, and user reports. URLVoid.com checks domains against multiple blacklists simultaneously.
Browser extensions can automate some of this. Web of Trust (WOT) displays safety ratings as you browse. Norton Safe Web and McAfee WebAdvisor offer similar functionality. These tools aren't infallible, but they catch many known bad actors.
Limitations of Automated Tools
No tool catches everything. New scam sites won't appear in databases until they've been reported. Sophisticated fraud operations rotate domains frequently to stay ahead of blacklists. Use these tools as one input among many, not as a definitive verdict.
Look for Trust Signals—and Verify Them
Legitimate businesses display trust badges, certifications, and association memberships. Scammers display them too—often fraudulently. The difference is whether you can verify them.
If a site displays a BBB Accredited Business badge, search for that business on bbb.org to confirm. Trustpilot badges should link to an actual Trustpilot profile page. SSL certificate badges from providers like DigiCert or Comodo can be verified by clicking them—fake badges are usually just static images.
Industry-specific certifications matter too. A pharmacy should display VIPPS (Verified Internet Pharmacy Practice Sites) accreditation, verifiable at safe.pharmacy. Financial services companies in the US should be registered with FINRA, searchable at brokercheck.finra.org.
Common Fake Trust Signals
- "As seen on" logos for major media outlets with no actual coverage
- Security badges that don't link to verification pages
- Fake customer count claims ("Join 2 million happy customers!")
- Awards from organizations that don't exist
- Celebrity endorsements that were never made
Your Pre-Purchase Verification Checklist
Before completing any purchase from an unfamiliar online business, run through these checks:
- Domain age check: Is the domain at least 12 months old? (WHOIS lookup)
- Review scan: What do Google Reviews, Trustpilot, BBB, and independent directories show?
- Contact verification: Does the phone number work? Does the address exist?
- Business registration: Is the company registered with relevant government authorities?
- Payment security: Does the site use HTTPS and offer credit card or PayPal options?
- Trust badge verification: Do displayed certifications link to valid verification pages?
- Scam database check: Does the URL appear on ScamAdviser, Google Safe Browsing, or similar tools?
- Price reality check: Are prices suspiciously low compared to authorized retailers?
If a site fails more than one or two of these checks, consider purchasing elsewhere. The few dollars you might save aren't worth the risk.
FAQ
How long does it take to verify if a business is legitimate?
A basic verification—checking domain age, scanning reviews on two or three platforms, and confirming contact information—takes about five to ten minutes. More thorough research, including business registration verification and scam database checks, might take 15-20 minutes. For high-value purchases, this time investment is worthwhile.
Can I trust a website just because it has good reviews on one platform?
No. Reviews on a single platform can be manipulated through purchased reviews, review gating (only asking happy customers for reviews), or fake accounts. Always check company reviews across multiple independent platforms. Discrepancies between platforms—glowing reviews on the company's preferred site but complaints elsewhere—are particularly telling.
What should I do if I've already been scammed by a fake website?
Act quickly. Contact your bank or credit card company to dispute the charge—most have 60-day windows for fraud claims. Report the scam to the FTC at reportfraud.ftc.gov (US), Action Fraud at actionfraud.police.uk (UK), or the ACCC's Scamwatch (Australia). File a complaint with the BBB and leave reviews on platforms like Compasly to warn other consumers. If you paid via PayPal, open a dispute through their Resolution Center.
Are sites with professional designs more trustworthy?
Not necessarily. Modern website templates and e-commerce platforms make it easy for anyone to create professional-looking sites quickly and cheaply. Scammers frequently use high-quality product images stolen from legitimate retailers. Judge sites by verifiable facts—registration, reviews, contact information—not visual polish.
Is it safe to buy from a business with no reviews at all?
New legitimate businesses do exist, and everyone starts with zero reviews. However, a complete absence of online presence increases risk. Look for other verification signals: business registration, verifiable contact information, secure payment options, and realistic pricing. Consider starting with a small purchase to test the business before committing to larger orders.
Taking a few minutes to verify an online business can prevent weeks of frustration, disputed charges, and lost money. The tools and techniques above work for any online retailer, service provider, or marketplace seller. When in doubt, search for the company on review platforms and directories—you can start by browsing business categories on Compasly to see what other customers have experienced. Trust your instincts: if something feels off, it probably is.