How to Identify a Fake Website in India (10 Warning Signs) | Scam Shield India

Fake websites cost Indians ₹1,750 crore in 2024

How to Identify a Fake Website — 10 Warning Signs to Check Right Now

Scammers build websites that look almost identical to real banks, shops, and government portals. Here's exactly how to spot a fake before you lose your money or data.

Updated June 2025 7 min read Scam Shield India Team

You receive a link on WhatsApp — it looks like your bank's website. The logo is there, the colors match, and there's even a login form. But something feels slightly off. Should you trust it?

Fake websites — also called phishing sites — are one of the most common tools scammers use in India today. They copy real websites almost pixel-for-pixel to steal your login credentials, OTPs, or payment details. Learning to spot them takes less than a minute once you know what to look for.

10 warning signs of a fake website

Sign #1

The URL looks slightly wrong

Fake sites use URLs like sbi-netbanking.com or paytm-support.in instead of the real domain. Always check the exact address.

Sign #2

No padlock / not HTTPS

If the URL starts with http:// (not https) or has no padlock icon in your browser bar, never enter any personal or payment information.

Sign #3

Spelling and grammar mistakes

Real brands proofread carefully. Fake sites often have broken English, typos, or awkward sentences copied from translation tools.

Sign #4

Pressure tactics and urgency

"Your account will be blocked in 2 hours!" Scammers create panic to make you act without thinking. Legitimate companies do not operate this way.

Sign #5

Unrealistic offers or prizes

Winning a lucky draw you didn't enter, or getting 40% cashback on UPI — if it sounds too good to be true, close the tab immediately.

Sign #6

No real contact information

Fake sites either have no "Contact Us" page, or list a Gmail/Yahoo address instead of an official company email domain.

Sign #7

Website was just created recently

Scam sites are often only a few days or weeks old. You can check a domain's age for free using a WHOIS lookup tool.

Sign #8

Broken links and missing pages

Scammers only build the pages they need (login, payment). Click on "About Us" or "Terms" — if they're broken or missing, it's a red flag.

Sign #9

Asks for unusual payment methods

Requests for payment via gift cards, crypto, or direct bank transfer to a personal account are classic signs of a scam site.

Sign #10

You arrived via a suspicious link

If someone sent you the link via WhatsApp, SMS, or email out of nowhere — be especially careful. Always navigate to important sites by typing the URL yourself.

How to read a URL like an expert

The web address (URL) is the single most reliable way to spot a fake site. Here's how to read it:

✓ Real website

🔒 https://sbi.co.in/personal/loans

HTTPS ✓ | Official domain: sbi.co.in ✓ | No extra words before the main domain ✓

✗ Fake website examples

⚠ sbi-netbanking.com/login

⚠ http://login.sbi.fraud-site.com

⚠ https://sbionline-secure.in/verify

The real domain is always the word immediately before the last dot + extension (.com / .in / .gov.in). Everything before it is just a subdomain that anyone can create.

Golden rule: Always type the website address yourself in the browser. Never click a link sent via WhatsApp, SMS, or email to visit your bank, UPI app, or any government portal.

Free tools to check if a website is safe

Before entering any personal or payment information on an unfamiliar site, run it through one of these free tools:

Google Safe Browsing — safebrowsing.google.com — checks if a site is flagged for phishing or malware
VirusTotal — virustotal.com — scans the URL against 70+ security databases
WHOIS Lookup — whois.domaintools.com — shows you when the domain was registered (very new = suspicious)
Scam Adviser — scamadviser.com — gives a trust score with a breakdown of risk factors

Common fake websites targeting Indians

Fake government portals

Scammers copy government websites (income tax, passport seva, e-challan) and charge fees for services that are free. Always use URLs ending in .gov.in for any government service.

Fake bank and UPI sites

Phishing sites that look exactly like SBI, HDFC, or ICICI login pages. They capture your username and password, then use it to drain your account. Your real bank will never ask you to verify your account via a link.

Fake online shopping sites

Websites offering brand-name products at 70–80% discount. They collect payment and either send fake products or nothing at all. Stick to verified platforms — Flipkart, Amazon, Myntra — and be skeptical of unknown shopping sites offering heavy discounts.

Fake loan and job portals

Sites that promise instant loans or high-paying remote jobs, then ask for a "processing fee" or "security deposit" upfront. No legitimate lender or employer will ask you to pay them before receiving anything.

Watch out: Many fake sites now have HTTPS and a padlock icon — scammers can get SSL certificates for free. HTTPS means the connection is encrypted, but it does NOT mean the website is legitimate. Always check the domain name too.

What to do if you already entered your details on a fake site

Change your passwords immediately — especially for your bank, UPI, and email accounts
Call your bank's helpline — ask them to block your card or account if you entered payment details
Call 1930 — the national cyber crime helpline — if any money has moved
Report the fake site on cybercrime.gov.in and on Google Safe Browsing (so others are protected)
Report on Scam Shield India — our team can help you take the right next steps

Act fast. If you shared your bank or UPI credentials on a fake site, call your bank and 1930 within the hour. Every minute matters when it comes to stopping a fraudulent transaction.

Quick safety checklist before you trust any website

✓ The URL starts with https:// and has a padlock
✓ The domain name matches the official brand exactly
✓ The site has a proper "About Us," "Contact," and "Privacy Policy" page
✓ The contact email uses the company's own domain (not Gmail/Yahoo)
✓ You navigated to the site yourself — not via a WhatsApp or SMS link
✗ The URL has extra words like "secure," "login," "verify," or "support"
✗ The site is asking for your OTP, PIN, or full card number
✗ There are spelling mistakes or broken English on the page
✗ The offer seems too good — massive discounts, lottery wins, guaranteed loans

Found a fake website? Report it to us.

Help protect other Indians. Submit the URL and details on Scam Shield India — our team will review it and escalate to the right authorities.

Report a fake website

Frequently asked questions

Check the URL carefully — the real domain should match the brand exactly. Look for HTTPS and a padlock. Check the site for a proper contact page, and run the URL through Google Safe Browsing (safebrowsing.google.com) or VirusTotal for a quick scan.

Not entirely. HTTPS means the connection between your browser and the site is encrypted — but anyone can get an HTTPS certificate for free, including scammers. Always check the domain name as well.

Act immediately — call your bank's helpline to block your card or account. If money has been debited, call the national cyber crime helpline at 1930. Then file a complaint at cybercrime.gov.in.

You can report it on cybercrime.gov.in, through Google Safe Browsing's report page, or directly on Scam Shield India. Reporting helps get the site taken down and protects others.

In most cases, they need you to actively enter details. However, some advanced phishing sites install malware when you simply visit them (drive-by downloads). Keep your browser and phone OS updated to reduce this risk.