She just needed to renew her passport.
She searched online, clicked what looked like an official government website. She filled in her name, address, social security number, date of birth, her parents names, her husband’s name, their wedding date, and her credit card information. The site charged her $111.12 and gave her a PDF form to mail in.
It was only later she discovered that the form was available for free on the real government website. The site she had used was a fraud. And now strangers had every piece of her personal information. So they can now steal her identity completely.
This is happening to Americans every single day.
What Is a Fake Website Scam?
Fake website scams come in two forms, and both are designed to be nearly invisible until it is too late.
The first type is a completely fraudulent website built to impersonate a real service. The fake passport site above is a perfect example. It looked official. It had a professional design. It showed up in search results. It charged a believable fee. Every detail was engineered to make a careful, intelligent person trust it completely.
The second type is a lookalike business that copies the name, logo, and photos of a real company to steal their customers. A jewelry business recently discovered that another company was using a name almost identical to theirs. They copied their logo, brand identity, and stole the photos. They used to lure customers into paying for products that would never arrive. Customers who thought they were buying from a trusted local business were actually sending money to scammers.
Both types cause real financial harm. And both are difficult to recover money from once the payment has gone through.
How Fake Shopping Sites Steal Your Card Details
You do not even need to be tricked by a lookalike brand to lose money. Sometimes you simply shop at what appears to be a discount retailer, enter your card details, and walk away thinking you completed a normal purchase.
One American ordered car parts from a website called cheaperhondaparts.com using their bank card. Within one hour, their bank flagged five fraudulent transactions, including an attempt to purchase an iPhone worth $1,498 in Virginia. The card details entered on that shopping site were immediately harvested and sold or used.
This type of fraud works because many fake shopping sites do complete your original order, or at least appear to process it. The goal is not to take your money directly. The goal is to capture your card details silently and use them elsewhere while you wait for a package that may or may not ever arrive.
The Most Dangerous Type: Subscription Traps
Some fraudulent sites do not steal your card details outright. Instead they bury a subscription clause in their terms and conditions, charge you once for a product, and then continue charging your account monthly under a company name you do not recognise.
One victim noticed a $259 charge on their credit card statement from a company they had never heard of and could find no information about. By the time they noticed, the money was gone and the company was unreachable.
These charges are intentionally small enough that many people miss them for months.
How to Tell a Real Website From a Fake One
Before entering any personal or payment information on a website, check these things:
Look at the web address carefully. Government websites in the United States always end in .gov. Any passport, IRS, Social Security, or immigration service using a .com, .org, or .net address is not official. The real US passport application site is travel.state.gov. Nothing else.
Search the company name plus the word “scam” or “reviews” before purchasing. Real businesses have a history online. Fake ones typically have no reviews, very new reviews, or clusters of complaints on the BBB Scam Tracker.
Check when the website was created. Free tools like whois.domaintools.com show you when a domain was registered. A website selling products or government services that was created three weeks ago is almost certainly fraudulent.
Look for contact information that works. Call the phone number. Send an email. A real business responds. A fake one either has no contact details or provides a number that rings out.
Never trust a website just because it appears in Google search results. Scammers pay for ads and use SEO techniques to place fake sites near the top of results for searches like “passport renewal” or “cheap auto parts.”
What To Do If You Entered Your Details on a Fake Site
If you realise you have given your payment details to a fraudulent website:
Call your bank or card issuer immediately and report the card as compromised. Ask them to cancel the card and issue a new one. Dispute any charges you did not authorise.
If you provided your Social Security number, date of birth, or government ID, place a free credit freeze with all three major credit bureaus: Equifax, Experian, and TransUnion. A credit freeze prevents anyone from opening new accounts in your name. It is free, it takes about ten minutes, and it is the single most effective thing you can do after an identity information breach.
File a report with the FTC at reportfraud.ftc.gov and with the FBI at ic3.gov.
Report the fake website to Google by searching “report phishing site Google” so it can be flagged in search results.
The Rule That Protects You Every Time
Before entering any sensitive information or payment details on a website, ask yourself one question: did I find this site by searching Google, or did I go directly to an address I already knew and trusted?
If you found it through a search, spend two minutes verifying it is real before you type a single character of personal information. Those two minutes are worth more than any cybersecurity software you could buy.
One search. Two minutes. It is the difference between a completed passport renewal and a stolen identity.
Think a website you visited might have been fake? Report it on our Report a Scam page and check our free Website Trust Checker tool at scamread.com/tools, coming soon.