A guide to recognising scam websites and staying safe online
Going digital has no doubt made life easier, allowing us to work online, collaborate with others, and bank online. However, using the internet can also leave you vulnerable to cybercriminals.
From phishing to fake websites, online scams have become so sophisticated that it can be hard to verify what’s fake and what’s real. Scammers sometimes even use trusted search engines like Google to appear authentic. On this page, you’ll learn how to check if a website is legit, discover important terms you need to know for cyber security, and learn more about safe online banking.
Protect yourself from scam websites by using
Always check (for example, using Google’s safe browsing tool), , and before sharing personal information or paying online
Many banks use and to protect your accounts and data
Here are some points to think about if you find yourself wondering, “Is this website legit?”:
When you want to know how to check if a website is safe, pay careful attention to the URL at the top of your browser. While some fake URLs are easy to spot, others might be hidden or changed to appear genuine. A simple method to identify if a site is malicious is by highlighting the entire URL, copying it, and pasting it into the search bar of a new tab. Before hitting ‘enter’ to search, review the URL once more. That way, you see the full, unaltered URL, exposing any manipulations that might be hidden at first glance.
Legit URL | Suspicious URL | What to look out for |
https://www.revenue.ie | https://revenue-ie-login.com | Added hyphens / extra words |
https://www.amazon.co.uk | https://www.amazon.biz | Uncommon top-level domain (everything after the final dot) |
https://www.aib.ie | http://aib.login-verify.com | Unusual subdomain + HTTP only |
https://www.paypal.com | https://paypa1-secure.net | Letters swapped for numbers + non-standard domain name |
E-commerce websites, where you shop or make payments, often feature trust seals when it comes to paying or whenever you enter sensitive information. Clicking on these seals will take you to the seal provider’s website to verify the site’s authenticity. Or, you can visit the seal provider’s website directly to check if a website is genuine. Click here to see a complete list of trust seals.
Checking whether a connection is secure is a simple yet crucial step to ensure that your communication with a website’s server is encrypted and safe. This means all information is shielded from third parties and fraudsters. To do this, look for the padlock icon in the URL bar.
Chrome: Click the padlock → ‘Connection is secure’ → ‘Certificate is valid’
Firefox: Click the padlock → arrow next to ‘Connection secure’ → ‘More Information’ → ‘View Certificate’
Edge: Click the padlock → ‘Certificate (Valid)’
Safari (Apple devices): Tap the page settings icon → ‘Connection Security Details’
If you’re directed to a website that doesn’t have ‘https://’ in the URL, and you are asked for personal information, you should exit immediately, since the website doesn’t have proper security measures in place.
Normally, trusted and secure websites have high quality content with proper syntax and grammar. Hackers will hastily scrap together a website to make money without paying attention to the details. You can often spot errors in grammar and spelling on these fake websites. If you encounter a website like this when making an online transaction, you can call your bank to verify its authenticity.
Another thing to look out for is if the text contains threats, creates a sense of urgency, asks you to do something immediately, or if it appears too good to be true.For instance, unfamiliar websites that offer savings accounts with higher-than-average interest rates might not be legit, or at least require additional scrutiny. Read more about safe places to keep your money.
Every website owner is required to register their domain name. You can check who owns a website by using a service such as WhoIs.net. This lets you see the individual or organisation behind the website for extra security. If you’re not able to find the ownership of a domain, and it appears fishy, then it probably is. It can mean that the owner does not want to be found.
If you’re looking at an Irish company website, you can also search for their name on the Companies Registration Office (CRO) database to see if it is officially registered. If the company address or name doesn’t match what’s on their website, it could be a warning sign.
Google’s helpful safe website checker, the safe browsing tool, is the easiest way to check if a website is legit and make sure it’s not a scam. Simply copy and paste the website URL in the tool’s search box and hit enter to get the results.
Another way to detect scams online is by reviewing feedback and what others have to say about the website. Trusted websites such as Trustpilot gather reviews from previous customers to help you check whether a website is legit. Some reviews even warn you against possible scams and inconsistencies, so you can make informed decisions.
However, as in other cases, it’s best to be cautious, as some websites will put up fake reviews to build a false sense of security. Be wary of reviews that are all new, repetitive, and badly written.
Remember, if a website seems dodgy or makes you suspicious, ask yourself, “is this a scam website?” and go through the checklist above to verify its authenticity.
If by any chance you end up on a malicious or fraudulent website, it is important that you don’t click anywhere or engage with it in any way – not even clicking on the back button. You should close the browser immediately and turn off your internet connection. After that, you can scan your device using antivirus software to check for any malware, and clear your cache and browsing history. If you think your data may be compromised, you might want to change your passwords.
Find out how to clear your cache and browser history in case you land on a scam website.
If you’ve followed the steps on how to know if a website is legit and you think a website is trying to scam you, you can report it through the following official channels:
The first step to protect yourself from fraudulent websites is to install antivirus software on your devices. Consult an IT specialist before purchasing the software to make sure it’s from a trusted provider. By taking active steps to search safely on the internet, you can avoid scam websites more efficiently.
Remember, phishing and other scams can also be avoided with due diligence. Check for website security signals like the padlock icon. Be cautious if you receive an email or text message you weren’t expecting. Don’t click on spammy links in emails or ads on suspicious websites, and report spam whenever possible. And finally, do your research on the company, making sure they display contact details on their site.
Yes, online banking is generally safe since many banks have encryption and multifactor authentication in place to secure their websites and ensure that your data is protected. This is a requirement under an EU law known as the PSD2 (second Payment Services Directive).
At Raisin, we follow stringent protocols to ensure that both your money and credentials remain secure. The Raisin website is protected by industry standard SSL Secure Sites Certificates to ensure any data you share with us is encrypted and therefore cannot be read. Learn more about how we protect your data and keep our website secure.
Plus, we only partner with banks that offer deposit protection, which means your deposits are protected up to €100,000 per bank should the bank fail.
If you have any questions, contact Raisin customer support:
Phone: +353 1 5461020
Email: contact@raisin.com
Support hours: Monday to Friday, 11am to 3pm
Here are some important cyber security terms, abbreviations, and technical jargon when you want to know how to check if a website is legit.
HTTP stands for Hypertext Transfer Protocol. It’s a fundamental protocol used for transferring data and information online. It enables the loading and communication between web pages through hyperlinks. A URL may also start with HTTPS, which is an extension of HTTP and means that your connection is secure (see the section on SSL below).
A URL, or Uniform Resource Locator, is a web address at the top of the webpage that identifies its location on the internet. It consists of various components like the protocol (such as “http” or “https”), the domain name (like “example.com”), and the path (such as “/page”). URLs are used to access web pages, files, images, and other online content.
The domain name is a component of the URL that acts as a sort of nickname for the complete web address. It’s the recognisable part, often the website’s name or a variation, which helps identify the site.
An IP (Internet Protocol) address is a unique identifier that sets individual internet users apart. Your home internet router also has its own IP address, disclosing its location. To discover your personal IP address, you can search ‘what’s my IP address?’ on a search engine like Google.
SSL stands for Secure Sockets Layer, and it was a commonly used cryptographic protocol for security. It was succeeded by TLS (Transport Layer Security) in 1999. While TLS is essentially the same, many still refer to it as SSL. This technology establishes a secure channel between devices over the internet or a network. The change from HTTP to HTTPS in a web address indicates the addition of security, where the ‘S’ stands for ‘secure’.
Phishing is one of the most common methods cybercriminals use to acquire sensitive data like passwords, bank details, and credit card information. They employ tactics like spammy emails and ads to direct you to fake websites that look genuine. These websites trick you into entering personal information, which the fraudsters then exploit and misuse.
Find out more about how to spot a phishing e-mail.
Malware refers to malicious software that cybercriminals use to trick people and obtain their personal data, like bank information, for financial gain. Malware can come in many forms, including: