How can I tell if a website is real or fake?

The route into the website is often your first clue.

Be more cautious if the link came from an unexpected text message, an unexpected email, a social-media message, a pop-up, an online advert, or a message claiming urgent action is required.

Safer routes include a bookmarked website you already use, an official app, typing a known website address yourself, or finding the organisation through an independent search and checking carefully.

An unexpected link deserves more checking than a site you deliberately navigated to yourself.

The web address itself is worth a close look, not just the page it loads.

For example, in:

https://www.examplebank.co.za/login

the important part is the core business name and ending:

examplebank.co.za

Watch for:

• misspellings
• extra words added into the address
• strange or unfamiliar endings
• substituted letters or numbers
• a completely different company name in the address

Fictional example — for illustration only

The page could copy colours, logos and wording perfectly. The address can still reveal that you are somewhere else.

No.

HTTPS means the connection between your browser and that website is encrypted. That is useful — it makes the data harder to intercept in transit.

But a scam website can also use HTTPS.

Be especially cautious if an unexpected site asks for your password, bank login details, card information, PIN, one-time security code, identity information, an urgent payment, cryptocurrency, gift cards, or remote access to your device.

A website becomes more important to verify as the consequence of being wrong increases.

1. The address is slightly wrong.
2. You arrived through an unexpected message.
3. The site creates urgency — for example “Pay within 30 minutes,” “Account will be closed,” or “Final warning.”
4. It asks for information you would not normally provide there.
5. Prices or offers seem unusually good.
6. Contact information is missing, vague or difficult to verify.
7. Something does not match what you expected — different branding, a strange checkout process, an unusual payment method, or an unexpected login request.

One sign alone does not always prove a website is fake. Look at the whole situation.

A few practical checks help:

• search for the business name independently
• check whether there is a real, verifiable contact method
• look for a clear returns/refund policy
• compare prices with established sellers
• check independent reviews, not only testimonials displayed on the site itself
• consider how long and consistently the business appears to have existed, where practical
• be cautious if payment is only possible through unusual, irreversible methods

No.

Search engines try to detect harmful sites, but appearing in search results or an advertisement is not a guarantee that a website is trustworthy. Sponsored results can also appear above ordinary search results.

Still check the domain, the organisation, the request, and the payment details — regardless of where you found the link.

Do not use appearance as proof. Fake sites can copy logos, colours, page layouts and wording.

Instead, close the page. Open the organisation’s official app or type the known website address yourself.

If necessary, contact the organisation using a trusted number from your bank card, a statement, the official app, or the official website found independently. Do not use contact details from the suspicious page.

1. Check the exact web address.
2. Confirm you intended to visit this business.
3. Check what you are buying and the total amount.
4. Check the seller’s contact and returns information.
5. Be cautious with unusual payment methods.
6. If something feels wrong, stop.

Stay calm and work through it step by step.

Password: change it through the real, official site or app. If you reused it elsewhere, change those passwords too.

Bank or card details: contact your bank or card provider using an official, trusted channel.

Security code: treat this seriously and secure the relevant account right away.

If you only clicked the link and are not sure what happened next, see I clicked a scam link on my phone. What should I do?

Stop.

Do not bypass warnings simply to reach the site. Browser warnings may indicate problems with the website connection, its security certificate, or known harmful content.

If you expected to visit a legitimate organisation, find it again independently rather than clicking through the warning.