Is a website safe if it has a padlock icon and starts with HTTPS?
What HTTPS really means
HTTPS (Hypertext Transfer Protocol Secure) encrypts the data you send to a website, so it can't be read by others on the network. The padlock icon in your browser indicates that the connection is secure. However, it says nothing about the website owner's intentions or legitimacy.
Anyone can get an HTTPS certificate, often for free. Scam sites use HTTPS too, because it makes them look more trustworthy. So while HTTPS is a good sign, it's not a guarantee of safety.
- HTTPS encrypts your data in transit.
- The padlock means the connection is private.
- It does not verify the site's honesty or business practices.
- Scammers can and do use HTTPS.
What else to check
Look at the domain name carefully. Scammers often use URLs that are similar to real ones but with slight misspellings or extra words. For example, 'amaz0n.com' instead of 'amazon.com'. Also, check for a physical address and phone number on the site.
Read reviews and check the domain age. If the site is new and has no online presence, be cautious. And always use a credit card for online purchases, so you can dispute charges if something goes wrong.
- Verify the domain spelling; watch for typosquatting.
- Check for a real address and phone number.
- Look up the domain age with a WHOIS tool.
- Search for reviews and complaints.
- Use a credit card for better fraud protection.
Common mistakes
- Believing that HTTPS alone makes a site safe to buy from.
- Ignoring the domain name and not noticing it's a lookalike.
- Assuming the padlock means the company is verified or trustworthy.
