Fake websites are the main tool of Phishing attacks. Scammers can create a website identical to a bank in just 5 minutes. How to distinguish?
1. Examine the Domain carefully
This is the most important factor. Look at the address bar:
- Typos:
facbook.com(missing e),vietcombankk.com(extra k). - Strange extensions: Reputable sites usually use
.comor.vn. Be wary of.xyz,.top,.cc,.vip. - Subdomains:
shopee.promotion-tet.com-> This is actuallypromotion-tet.com, not Shopee.
2. Check "Padlock" (SSL)
The padlock icon next to the domain indicates an encrypted connection (HTTPS). However, do not trust it absolutely. Scammers can also buy free SSL certificates nowadays.
3. Check Contact Info (Footer)
Scroll to the footer. Real websites always have full info: Headquarters address, Landline number, Business email, and "Notified Ministry of Industry and Trade" logo. Try clicking that logo to see if it leads to the Ministry's site.
4. Use Checking Tools
Don't guess. Use free and powerful tools:
- VTrust Scam Check: Enter the link into VTrust's search box to view report history.
- VirusTotal: Scan the link through over 70 antivirus engines.
- Google Safe Browsing: Check if Google marks this page as dangerous.
Tip: If suspicious, try entering a wrong password first. If the site still says "Login successful" or redirects, it's definitely a fake site collecting your info.