ScamSmarts

Lookalike login page

Cloned sign-in page on a domain the provider does not own.

How to spot it

  • Address bar domain not the provider's
  • Padlock present but irrelevant

What to do

Check the registrable domain, not the padlock.

What the real thing looks like

  • Provider's real sign-in domain

Try an example

A practice example with fictional companies. Answer it, then see the tells.

Is this website a scam or legit?

Secure connection (padlock)Address: https://sites.google.com/view/docusign-review-document
Page title: DocuSign - Review and sign

Review and sign your document

Sign in with your email to open the agreement.

EmailPasswordView document
Your answer
How sure are you?

Sure and right: +15. Sure and wrong: -5. Calling a legitimate item a scam counts as a miss.

Test yourself on eight more

The free quiz mixes scams with legitimate messages, like real life. No sign-up.

Sources