How do I know if a website is fake?
Fake websites are designed to look exactly like real ones — copying logos, colours, and layout. There are several reliable warning signs to check. First, look at the address bar: real websites have addresses that exactly match the real organisation (scotiabank.com, not scotiabank-secure.net or scotiabankca.com). Look for the padlock icon — but know that even fake sites can have it. Check for poor spelling, grammar, or design — professional organisations have professional websites. Be suspicious of sites reached by clicking links in emails. If you are unsure, search the organisation's name on Google and go to the result that clearly shows the real website — rather than clicking the link you were given.
What to do
- Check the full web address carefully — look for extra words, hyphens, or misspellings.
- Legitimate sites: scotiabank.com. Fake: scotiabank-secure.net or canadascotiabank.com.
- Look for the padlock icon in the address bar — though this is not foolproof.
- Look for spelling errors, blurry logos, or poor design on the page.
- Do not enter any information on a site you are not 100% confident is real.
- When in doubt, close the page and search for the organisation directly on Google.
The 3-Second Rule
When you are unsure if a website is real — close the tab and search for the organisation directly on Google. Then click the official result, not a link you were given.
Important Warning
Fake websites can look pixel-perfect. The address bar is your most reliable check — one extra word or hyphen in the web address is a clear sign of a fake.
Learn More
Go deeper with our full lesson: Module 2: The Security Shield.