1. News
  2. Everyday tech
  3. Scams · Online safety
Scams · Online safety3 min read

How to tell if a website or social account is a scam

Scam kits that copy whole websites now cost a few hundred dollars, and AI is making fakes harder to spot. Here are the checks experts still trust.

By the Dashline deskSource: Mashable
How to tell if a website or social account is a scam
Photo: Mashable

Fake websites and social accounts are getting cheaper to build and harder to spot. According to Pew Research, about one-third of recent web content is AI-generated. Scammers can copy an entire site, a login page and even a crowd of fake fans for a few hundred dollars. The good news is that a few simple checks still work, and they take only seconds.

Why fakes are spreading

Pew also found that around 10 percent of ".com" sites now show signs of AI. Fake news sites, often called "pink slime," have long outnumbered real news publishers, and AI is helping them multiply. Donnie Hasseltine of Arkstone Defense says high-quality deception used to belong to nation-states and well-funded groups. Now, he says, anyone can fake a site or build a bot quickly.

Zohaib Ahmed, CEO of deepfake detector Resemble.AI, compares it to the "Wild West." Bad actors can use AI tools without built-in safeguards, so mainstream models never see what they are building. Cheap "scam kits" cover everything from ads and blog posts to login portals and natural-looking engagement.

Why old advice falls short

Eyal Elazar of Riskified says the traditional signs of a fake are fading. A weirdly spelled web address, blurry images or a stiff robotic voice used to give scams away. Today, he says, AI can clean all of that up. Scammers also use look-alike addresses, such as "abcnews.com.co," that imitate real news sites and organizations like FIFA. They count on people not looking closely.

Check the web address

The oldest tip still works: read the address. Experts quoted in the article suggest these steps.

  • Look for the padlock or a note that the connection is secure. In Chrome, select the icon left of the address.
  • Check that the address starts with "https://" and not "http://".
  • Read the spelling closely. Watch for symbols or non-English letters standing in for English ones.
  • Hover over a link to see its full text, or search the address on Google.
  • Try Google's site status page or an online URL scanning tool.

Pay attention when your browser warns you about a site. Only continue if you know where the site comes from. Keep in mind that a site can look legitimate on the surface while its content is far from it.

Check the account

Social media does not follow the same rules. Start with the platform's own verification, such as the check mark. Then open the profile itself, not just the post in your feed. Many platforms allow custom characters in display names, which lets people fake a check mark at a glance. On X, users can buy verification, so look for other proof there.

Watch for AI-generated influencers too. Look for AI labels in captions, comments and profiles, though many fake accounts slip past detection. Risky links also show up in odd places, such as TikTok Shop links that lead off the app and chats with players you thought were friends.

The takeaway

Before you click, log in or send money, read the full web address and open the profile page itself.

More articles

You should really read these.

Next step

Let’s talk