A fake website imitates a legitimate organization or invents a business to steal credentials, identity information, payment data, or money. It may copy logos, product photos, policies, and sign-in screens. HTTPS and a polished design do not establish that the operator is legitimate.
Common fake websites
Copied bank and email logins collect passwords and codes. Fake stores take payment without delivering the advertised item. False government, delivery, toll, and technical-support pages create urgency around a fee or account problem.
Some scams use a legitimate form, cloud-storage service, or compromised website. The domain can be real while the content or request is fraudulent.
How to identify one
Read the registrable domain and compare it with a known source. Research the business outside the site, check return and contact information, and examine the requested action. A new domain, copied text, unrealistic price, unusual payment method, or broken navigation increases concern.
Open the official app or type the known address for sensitive accounts. Do not use contact information provided only by the suspicious page.
What to do after using a fake site
Change submitted passwords, revoke sessions, contact financial institutions, and remove downloads or permissions. Use IdentityTheft.gov for exposed identity data. Report fraud at ReportFraud.ftc.gov.