Fake Websites and how to recognize them
Introduction
Hackers and scammers constantly evolve in their expertise in bringing websites online that are almost indistinguishable from the real deal. So how do we actually spot one then and how do we protect ourselves from exploitation?
The following list can help you decipher the right from the wrong.
1. Do you notice spelling mistakes in the URL or domain name?
Scammers are very good at hiding a fake domain name. Since the original domain name is registered to someone else, they can’t legitimately use a copy. To get an unsuspecting individual to go to the fake domain, they need to use trickery. Examples can be seen below.
Actual
www.Movielists.co.za |
www.Onlycars.ie |
www.carpetsforlife.net |
www.johnsmith-investment.org |
www.moneinyourpocket.ca |
www.castlehotel.uk |
Fake
www.Movilists.co.za |
www.Only–Cars.ie |
www.carpets4life.net |
www.jsmith-investment.org |
www.moninyourpocket.ca |
www.castelhotel.uk |
2. Are there any words added to the URLs or domain name?
Another way to trick web users is by adding words to the Domain Name that makes it seem real when it will in fact, it will lead you to a spoofed website.
A domain name is usually the name of the company combined with an extension like .com or .gov.
Scammers will try to impersonate a legitimate brand however they can’t simply register the same domain name Scammers will alter the name to make it seem legitimate.
In the same list as above, we can see some examples to show how this is possible.
Actual
www.Movielists.co.za |
www.Onlycars.ie |
www.carpetsforlife.net |
www.johnsmith-investment.org |
www.moneinyourpocket.ca |
www.castlehotel.uk |
Fake
| www.Movielists-films.co.za |
| www.Onlycars.ie.allmodels.com |
| www.carpetsforlife.net.ca |
| www.johnsmith-investment-cash.org |
| www.moneinyourpocket.ca.money.com |
| www.castlehotel.uk.rooms.uk |
3. Did you use a link to access a website?
Links in text messages and e-mails are often used to guide a user to a fake website to steal credentials. Users can also be guided to an advertisement on a legitimate website that could inadvertently lead them to another fake website or could possibly install malware on the users’ device.
If you ever get a text or e-mail containing a link, you should not follow this included link, even if it looks real. Maybe you get a text from www.Movielists.co.za, that ask you to update your account within 3 days, as “all accounts not updated will be removed due to system upgrade”.
Not suspecting anything, you click on the included link that take you to a website, maybe something like www.new.Movielists.co.za. Here you add your new details to “update” your account as requested. Your name, address, phone number, bank account etc. You never suspected a fake website, but just like that, your details are stolen. And you might not even know about it until months later when a new bank account gets opened in your name.
A safe user will ignore the link and go directly to www.Movielists.co.za, log into their account and update their personal details, and finish by logging out.
4. What does the quality of the website look like?
According to the Better Business Bureau, the quality of the website you visit is not always the best indicator of whether it is a fake website, however if you have visited the website of your bank a week ago, and today all of a sudden, the colors look off, or the picture doesn’t look clear, you should get out of there in a hurry. Some self-created websites that are completely legitimate might, due to the inexperience of the creator, come over as being of low quality.
If you ever doubt whether the website is real, and you have no way of being certain, then pick up the phone and give them a call.
5. Does the Contact information look legitimate?
You accessed the website, it looks real, but you still have doubts, then head over to the “Contacts” page. A legitimate website should have an address listed and a phone number, and/ or office hours.
If they have no address listed, doing a search for the company’s contact details on the Internet is advisable. You could also check the address on Maps to see if it is correctly listed, or indeed a fake address.
6. Is there any Policy information listed?
Companies should have some form of Usage policy or Terms and Conditions listed. This is especially true for webstores. Shipping terms should be defined as well as Return policies, shipping duration etc.
Scroll to the end of the posted policy to make sure that it is a complete policy and not just a first page and that the rest is garble.
For companies that don’t have a web store, you could see other policies on the website as in Legal stipulations, Copyright and Privacy notices. Just like the point about quality listed earlier, some inexperienced creators might not have included this on the website, but it is always good to check.
7. Did you search for Reviews and Scams relating to the website?
You can look for evidence that the website you are visiting has been reported as a scam. To do this you type the name of the website in your browser and add the word scam or review to the search. Other victims of this website might have reported it, or you by chance could find a lot of good reviews. However, when reading reviews, be aware of repetitive reviews or lots of spelling mistakes, or hugely inflated reviews, as these might be fake as well.
8. Use a fake website checker
Use a website checker like Google’s Safe Browsing tool to warn you if the website you visit is a fake site. Norton Safe Web is a great tool and if you already have Norton anti-virus, you could purchase Norton Safe Web as an extension.
Once you discover a fake website, you should report it. Google’s reporting tool can be used for this. Google will add this site to its list of “attack sites”. On many web browsers, you can also report it by clicking on the three dots on the top right of the page, going to “help”, and then looking for a tab that lets you “report an issue”.
Conclusion
There will always be bad actors attempting to deceive people to disclose private information. From the examples listed here it is clear how scammers trick people. Some changes in Domain Names are so small that it is easy to mis them. Being aware is the first step in navigating the web safely.
Watch our YouTube CyberSafe Series.
