Is this site a clone before you log in or pay?
A fake site can be a perfect copy of a bank, a delivery service, a professional tool or a shop. Here: a clear checklist + a 30-second method to avoid traps (payment, login, identity theft).
What you risk in 10 seconds:
- Credential theft (email, banking, professional tools)
- Irreversible payment (card, bank transfer, fake checkout)
- Installation / redirection / session recovery (cookies, access, impersonation)
Important: HTTPS padlock, “professional” design, displayed known brand… prove nothing. The right reflex: slow down and verify through an official channel or a verifiable proof.
The most common signs of a fake site
Clones keep using the same techniques: impersonate the brand, push you to act fast, then collect a payment or access.
- Suspicious domain (similar name, hyphens, typos, strange extension) : Clones copy the brand and change 1 character: .com vs .net, adding a hyphen, a discreet typo. Do not rely on the logo.
- Link received under pressure (email/DM/SMS) = danger : Most scams rely on urgency. If you are pushed to click quickly, assume it is suspicious.
- Inconsistent payment page : Unclear amount, unexpected fees, strange redirect, overly intrusive form: stop. A real checkout is clear.
- Aggressive login / “account verification” : A site that forces an immediate login or asks for codes/SMS/2FA through a message is typical of clones (Google/Microsoft/bank).
- Legal notice, terms, contact: missing or fake : Impossible address, untraceable company, copied-and-pasted pages, dead links: a common sign of a disposable site.
- Weak proof: professional design ≠ legitimate site : Fraudsters copy the look perfectly. A “clean” site can be a clone. Look for verifiable proof, not appearance.
Simple rule: if you are pushed to pay or log in “right now”, treat the site as suspicious until proven otherwise.
The cautious 30-second method
Goal: avoid the two costly mistakes — paying too quickly, giving access too quickly.
- Do not click from the message: retype the address or use a bookmark.
- Check the exact domain (characters, extension, subdomains).
- Compare with the known official channel (the official site you found yourself).
- Before payment / login: if in doubt, stop. A verifiable proof must be publicly accessible.
Trap example: login-kicklinks.com.evil.com may look credible, but the real domain is evil.com. What matters is the end of the domain.
Useful shortcut
The right reflex: never follow the received link. Go to the official site yourself, then compare.
Check a site nowWhat should you do if the site is probably fake?
- Immediate stop: no click, no payment, no codes : If you doubt, you stop. Scams win on speed.
- Verify through an official channel : Go to the official site from a search/bookmark, then find the page from that channel. Never from the received link.
- Create a proof if it is sensitive (pro) : If the issue is legal (invoice, contract, payment, access), independent proof is stronger than a screenshot.
- Report + secure : Report the site and change your passwords if you entered credentials. Enable two-factor authentication.
If the scam comes from an email, also start by checking the email and, if needed, creating an email proof.
FAQ
- Is the HTTPS padlock enough? No. A clone can have HTTPS. It is not proof of authenticity.
- Why do these sites look “perfect”? Because they copy templates or the official site. The look is misleading.
- What is the best reflex? Never act under pressure and verify through an official channel, especially before payment.
- Does Kicklinks automatically “detect” the scam? No. Kicklinks indicates whether there is a verifiable proof publicly accessible.
Useful links
Other checks: email · social account · document
Do not pay without checking
If you have a doubt, you already have enough information to stop. Check first: it is the only reflex that costs less than a mistake.
