ScamSmarts

Fake page on a real host

Scam pages hosted on real Google/Microsoft/cloud platforms (sites.google.com, forms, storage buckets); the domain is real but the page is not the brand's.

How to spot it

  • Brand login or payment page on a generic hosting subdomain
  • Path or title names the brand, domain is a shared platform

What to do

A real domain proves who hosts the page, not who wrote it. Banks and payroll sign-ins live on the bank's or payroll provider's own domain.

What the real thing looks like

  • Real Google or Microsoft sign-in pages on their sign-in domains

Try an example

A practice example with fictional companies. Answer it, then see the tells.

Is this website a scam or legit?

Secure connection (padlock)Address: https://sites.google.com/view/acme-bank-secure-signin
Page title: Acme Bank Secure Sign-in

Acme Bank Secure Sign-in

Online banking IDPasswordSign in
Your answer
How sure are you?

Sure and right: +15. Sure and wrong: -5. Calling a legitimate item a scam counts as a miss.

Test yourself on eight more

The free quiz mixes scams with legitimate messages, like real life. No sign-up.

Sources