Online safety guide
How to Identify a Scam
Learn what to check before sharing your details, how to spot common scams, and what to do when something feels off.
Before you click or share
Inspect the address
Read the actual domain, not just the logo or page design.
Pause on urgency
A countdown or threat is a reason to verify independently.
Use a trusted route
Open the company's site yourself instead of following a message link.
Is That Site Safe?
No single sign proves a website is safe. Use several independent checks before sharing personal details.
Encrypted connection
Check for https:// in the address bar. It encrypts your connection, but does not prove the site is genuine.
Domain Matches Brand
The domain name should closely match the company name. Watch for extra words or misspellings.
Clear privacy policy
Look for a readable explanation of how the site uses your data. A policy alone is not proof of safety.
Verifiable contact details
Look for a way to contact the business, then check those details through an independent source.
Warning signs to slow down for
If something looks wrong, verify the site through a source you trust before entering details.
Some unsafe sites collect personal information. Avoid entering data on sites you cannot verify, and review what is already public about you.
Is It a Scam?
Scams take different forms, but the goal is often the same: get your money, credentials, or personal details.
Fake Invoice Scams
You receive an invoice for something you never ordered, counting on confusion to make you pay.
Phishing Emails
Criminals impersonate banks, government agencies, or tech companies to steal your credentials.
Romance Scams
Fraudsters build fake relationships to eventually request money or personal information.
Lottery & Prize Fraud
You're told you've won something, but must pay a fee or provide personal details to claim it.
Identity Theft
Criminals use your leaked personal data to open accounts, apply for loans, or file taxes in your name.
Tech Support Scams
Fake tech support calls claim your device is compromised and ask for remote access or payment.