A well-designed site, a well-known logo at the bottom of the page, a padlock in the address bar: these elements are reassuring, yet a fraudulent site can replicate each of these signals in just a few hours. Detecting an unreliable website requires a method, not just a quick glance.
Whois and domain age: a quick and revealing check
Even before reading the content of a site, its domain name tells a story. A free Whois tool (like the one from ICANN) allows you to check the creation date of the domain, the country of registration, and the name of the holder.
A commercial site claiming to have existed for ten years but whose domain was registered three months ago presents an obvious problem. A recent domain associated with old promises is a strong warning signal.
Another revealing detail: is the domain holder masked by a privacy service? For a personal blog, this is common. For a store that asks for your credit card number, it’s suspicious. Several online guides detail this verification process, and consulting a review on the site Aplouf com helps to understand how these signals manifest on a dubious site.
Have you noticed unusual hyphens or numbers in the URL? A domain like “brand-sales-france-82.com” is trying to position itself on popular keywords with no real connection to the targeted brand.
AMF and ACPR blacklists: a registry to check before any investment
The usual advice focuses on e-commerce sites. Most of the most costly online scams do not sell counterfeit sneakers. They offer financial investments, trading, or cryptocurrency.
The blacklists published jointly by the AMF and the ACPR list thousands of sites not authorized to offer financial products. These sites often display impeccable design, live chat, and legal notices copied from legitimate platforms.
If a site offers you guaranteed returns, trading training, or cryptocurrency investment, the first reflex is to check its name on the financial agents registry (Regafi) and on the blacklists published by the AMF. A site absent from Regafi that offers financial products is very likely fraudulent.
Fake online reviews: what European regulation has changed
Have you ever hesitated to order from a site because the reviews seemed too unanimously positive? This doubt is healthy. Since May 2022, the European “Omnibus” directive qualifies the publication of fake reviews as an unfair commercial practice “in all circumstances.”
Specifically, a reliable site must now:
- Clearly indicate if and how it verifies the authenticity of published reviews
- Not selectively remove negative reviews to inflate its average rating
- Not order or purchase fake positive testimonials from third parties
A site that only displays five-star reviews without any mention of the collection method potentially violates this regulation. The lack of transparency regarding review collection is as telling a signal as the absence of legal notices.
Also check the consistency of the reviews: very similar texts published on the same day, profiles without history, generic phrases (“great product, fast delivery, I recommend”) are classic indicators of fabricated reviews.
Technical signals of a fraudulent website: beyond the HTTPS padlock
The HTTPS padlock means that the connection between your browser and the server is encrypted. Nothing more. A free SSL certificate can be generated in a few minutes. The padlock protects data transmission, not the reliability of the recipient.
The technical signals to watch for go further:
- Contact pages that do not include a physical address, phone number, or functional form
- Terms and conditions copied and pasted from another site (search for a full sentence in quotes in a search engine)
- Broken internal links or “under construction” pages on a site that is supposed to have been active for a long time
- An automatic redirection to a payment page without the possibility to navigate freely
The payment URL, last line of defense
At the time of payment, the URL must match the site’s domain or a recognized payment provider. If you are redirected to a page whose address has no relation to the original site, close the tab. An inconsistent payment URL with the merchant site is the most reliable signal of a scam.
An unreliable site relies on speed: it wants you to pay before you think. Countdown timers (“offer expires in 3 minutes”), artificially limited stocks, and persistent pop-ups exploit this psychological trigger. A serious seller never rushes you to pull out your credit card.
The best filter remains the combination of several checks: domain age, presence on financial blacklists, transparency of reviews, consistency of legal information, and payment URL. No single criterion is sufficient, but three weak signals that converge are worth a strong signal.
