5 Free Ways to Check if a Website Is Safe

Updated June 2026 · 4 min read

You're about to type your card number into a website you've never used before, and a small voice asks: is this website legit? Good news — you don't need to be a tech expert to answer that, and you don't need to pay anyone either. Here are five free ways to check if a website is safe, and each one takes less than a minute.

1. Read the address bar properly

The address bar — the box at the top of your browser that shows the site's address — is the most honest thing on any page. Scammers can copy a bank's logo and colours perfectly, but they cannot use the bank's real address.

The trick is to read the address from right to left. The true owner of a site is the last chunk just before the first single slash, not whatever familiar name appears earlier in the line.

• https://www.example.com/login — reading right to left, the owner is example.com. That's what it claims to be.
• https://example.com.account-check.example/login — the real owner is account-check.example. The "example.com" at the front is just bait stuck on as decoration.

While you're looking, let's clear up the biggest misconception in web safety: the padlock icon does not mean a site is trustworthy. It only means the connection is encrypted — scrambled so nobody in between can eavesdrop. Scammers can get that padlock for free in minutes. A padlock on a fake site simply means you're talking to the scammer privately.

2. Run the address through Google's free safety check

Google keeps a constantly updated list of websites caught spreading scams or viruses, and anyone can search that list for free:

1. Go to transparencyreport.google.com/safe-browsing/search.
2. Paste in the website's address.
3. Read the verdict — it tells you whether Google has flagged the site as dangerous.

One caution: a clean result is a good sign, not a guarantee. Many scam sites are only days old, and the newest ones may not have been caught yet. Treat this as one vote of confidence, not the final word.

3. Look up how old the website is

Here's a pattern worth knowing: scam websites tend to be very young. They get reported and shut down quickly, so the people behind them keep registering fresh addresses. A genuine shop or bank has usually owned its address for years.

You can check any site's age with a WHOIS lookup (pronounced "who is" — a public record showing when a website's name was registered). A free option is lookup.icann.org, run by the non-profit organisation that oversees website names. Type in the site's name, such as example.com, and look for the "registered on" or "creation" date.

If a site claiming to be an established business was registered three weeks ago, slow down — especially if it's asking for money or passwords. A young site isn't automatically a scam (new businesses exist!), but young plus pushy is a bad combination.

4. Search the site's name plus "scam" or "reviews"

Before you buy anything, spend thirty seconds in a search engine. Search the site's name followed by the word scam, then again followed by reviews. If other people have been burned, they have almost always complained somewhere public.

What to look for:

• Complaints on independent sites — forums, consumer-protection pages and review platforms. One angry customer can be a fluke; a pattern is a verdict.
• Total silence — if a shop claims huge discounts and thousands of happy customers, yet the rest of the internet has never heard of it, that silence is itself a warning.
• Ignore reviews hosted on the site itself — glowing testimonials on the very page you're checking prove nothing, because the owner wrote or chose them.

5. Use a safety extension that checks automatically

An honest admission: nobody runs the four checks above on every single link, every day. That's where a browser extension — a small add-on that works inside your browser — earns its keep, because it can repeat this routine automatically on every page you open. Our free Spam & Phishing Site Detector checks each site you visit for common scam signals, such as look-alike addresses and suspicious login forms, and turns its shield red when something looks wrong.

Whichever extension you choose, also make sure your browser's built-in protection is switched on. Chrome and Firefox use Google Safe Browsing, and Microsoft Edge has SmartScreen — both warn you before known dangerous pages load, and both are free and on by default. Don't turn them off.

No single check is perfect — layers win

Every method on this list can be fooled on its own. Google's list can lag behind a brand-new scam, a young website might be an honest new business, and reviews can be faked. But it is very hard for a scammer to beat all five checks at once.

No single tool can prove a website is safe — but a site that fails even one of these checks has earned your suspicion. Stack the checks, and you stop being an easy target.

So layer your defences: read the address bar every time, reach for the free lookups whenever something feels off, and let an automatic checker watch your back in between. It costs nothing, and it makes you the one thing scammers can't stand — a visitor who looks before they click.