How to spot a fake retail website before you buy

I got a question this week from Janet in Idaho. She was scrolling Instagram, clicked an ad for a super-cute dress and bought it. Next thing you know, there are bogus charges on her debit card. “How the heck did that happen?” she asked me. “It was a website I’ve shopped on before.”

Oh, Janet, don’t be a Mrs. Potato Head. Only use a credit card to shop online. They have fraud protections that debit cards don’t. And be on the lookout for scammers’ newest trick: Fake websites.

It starts with clicking an ad

This latest nefarious trick works because it’s copying websites you trust. The URL looks fine, the logos and slogans are there, the product pages look normal, and the payment platforms shown are all legit. Some of the sites even have the trusted HTTPS certification and 100% fake reviews.

So, how do you end up there in the first place? The jerk behind the site takes out social media ads and sends emails. You’re then lured by the extra-low prices, special discounts and free shipping.

Spoiler: You aren’t getting that product you ordered, or it’ll be a cheap knockoff. Worse, you may end up with a malware download that steals even more of your personal information.

Spot fake sites, fast

Here’s my quick cheat sheet to check before making a single click. For starters, if the price of whatever you’re buying is less than half of what it normally would be, move on, and ask yourself these questions:

  • Is the URL multiple words? Big brands have enough clout to get simple domain names, like Macys.com or BestBuy.com. Fraudulent sites use longer, weirder titles like “MacyOutletShop.”
  • Does this trendy boutique even exist? Many scam sites use names that sort of sound real, like “Homitage.” But if you’ve never heard of it, Google it. You should at least come up with reviews, additional landing pages or third-party sites selling the brand.
  • Are there pushy pop-ups? Some websites have pop-ups for chats or discounts. But phony sites push pop-ups to ask for your contact or payment information while you’re still shopping.
  • Where’s the customer service? Counterfeit sites may have a “Contact Us” email form that goes nowhere, but real sites will have plenty of ways to contact their customer service team.
  • How do images look up close? Reliable sites use high-res images that are easy to expand or open in another window. Bogus sites typically use low-quality pics that don’t stand up under scrutiny.

Pro tip: Check the IP 

Use this IP address tool to see where the site is located. Look for suspicious signs, like an American business with an IP address from overseas, including spots like China, India, Venezuela and other places that just don’t make sense.

Janet in Idaho, this one’s for you … The other day, I was in Safeway getting ingredients for potato leek soup. Two women were engaged in deep conversation about a friend’s divorce right in front of the leeks. So I said, “Excuse me, ladies, I need to take a leek.” It took them a few seconds to laugh.

Continue reading

VPNs: How they work and how to choose the best one for you

I’m sure you’ve heard me mention VPNs before on my show. With hackers, thieves and scammers constantly out in full force, ready to steal your money, now’s the time to get on board.

VPN is short for virtual private network. What this means is when doing your banking online, hackers can’t step in the middle and steal your account information and drain your money. A VPN also stops your internet provider from tracking you and lets you unblock websites and bypass filters. You need it on your computer, laptop, tablet and phone.

Continue reading

Magic AI Teleprompter

Some would say this is cheating, others would consider it “bluffing.” Where do you stand? Credit: TikTok – finalroundai

You spotted a scammer on Facebook: Do your good deed and report the page. Go to the profile, and in the top right corner, click the three dots. Select Find support or report, and then follow the on-screen prompts.

👊 Protect your personal info: Ensure your online privacy and keep your sensitive data safe from hackers and identity thieves. I use and recommend ExpressVPN. Literally one click and you’re protected. Use my link to get three months free.

Your worth on the Dark Web

Here’s a shocker for you: With as little as $1,000, a cyber creep can go to the Dark Web and buy your entire identity. That means they get your Social Security number, bank account info and anything else they need to pose as you — or someone you love — online.

Continue reading

Stolen identity: The hidden dangers of medical ID theft

You’re feeling sick, so you go to the doctor. Bad news: You need surgery. Worse news: Your insurance won’t cover it. They say you’ve already had two surgeries this year.

The catch? You haven’t. This is the nasty reality of medical fraud. 

Continue reading

Guard your heart against love scammers

Looking for love or think you found “the one” online? Make sure your new guy or gal isn’t using any of these love scammer tactics.

⛔ I hate when tech companies do this: Firefox’s new default feature, “privacy-preserving ad measurement,” actually gives your data to advertisers. Turn it off. Click the three-line icon in the top right corner, followed by Settings > Privacy & Security. Scroll to Website Advertising Preferences, and disable Allow websites to perform privacy-preserving ad measurement.

Stop using your Google profile this way: Logging into other services through Google puts one of your most important accounts at risk. Log in at myaccount.google.com and tap Security. Scroll to Your connections to third-party apps & services > See all connections. You’ll see a list of apps. Open the details, then click Stop using Sign in with Google.

Don’t suffer in silence: If you get scammed, report it. You’ll save someone else from being a victim and leave a paper trail if the crook that scammed you ever gets caught. You can report online scams at the Internet Crime Complaint Center and even share your story on Reddit’s r/scams.

Airplane Wi-Fi: Read this before you use the Wi-Fi on a plane. Anyone can grab your credentials. If you’re not flying soon, hit the site and email the article to yourself to read later.

Vacation upgrade: Before you sign onto the in-flight or hotel Wi-Fi, turn on a VPN. It’s a layer of protection and privacy between you, hackers and the network. Get an extra three months of my VPN pick here.

Say no: If your bank asks you to set up your voice profile attached to your account, decline. You can bet hackers are trolling the internet to get clips of folks talking to make their own deepfake copies. A fingerprint or a solid password are safer login methods.

Your eyes only: Make sure someone can’t open a doc on your PC. In MS Office and Google Docs, click the Help button in the menu bar. Click Help again, then type in Encrypt with Password. Your program of choice will walk you through the steps.

All signs point to yes: Want to find out if you’re a data breach victim at this very moment? Here’s one option — and another. Type in your email address to check.

3 reasons you shouldn't go another day without antivirus software

If you don’t have antivirus software, you’re putting every internet-connected gadget you own at risk. Something as simple as an unchanged router password can be an entry point for an invader to shut down your phone or even taunt your children through a security camera or smart speaker.

Continue reading

Protect all your devices with the best antivirus software

When it comes to antivirus software, there’s no better choice than our sponsor, TotalAV. For one, it’s available for your phone and computer, so all your devices are protected.

This security suite protects all your devices from the scariest online threats, such as ransomware, spyware, adware and (of course) malware. Its WebShield browser extension provides advanced protection against malicious websites and even blocks bad guys from stealing your data.

Continue reading

Scam texts to watch for - And my trick to stop them

“You coming?” “You’re owed $23,060!” “Your package is stuck at the warehouse.”

I’ll give you one guess what these lines have in common. Yep, they’re scam texts — and the scariest part is these kinds of cons work.

Continue reading

Cybercriminals and spies targeting routers: Hackers’ new side hustle is charging Chinese and Russian spies and scammers for access to old routers so they can launch denial-of-service (DoS) attacks or send scammy spam emails. If your device is more than three years old, it’s time to upgrade.