How can I tell if a website is malicious?

According to Rupert, look at the address for typos or added words, check for the https, and be wary of any message pressuring you to act fast. If the site asks for an unusual payment or a password by email, it is often a clear sign of fraud.

Which websites should I avoid?

As Rupert explains, avoid any site whose address resembles a well-known company but with slightly altered spelling, as well as sites offering prizes or gifts for no reason. In Quebec, these sites often target seniors by email or text message while posing as an official institution.

How do I know if it is a scam?

A scam almost always creates a sense of urgency or fear to push you into clicking or paying quickly. If a message demands immediate action without giving you time to verify, it is best to close the page and confirm the information through another channel.

How can I check if a URL is safe?

Type the address directly into your browser instead of clicking a link you received, and compare it letter by letter with the official address you already know. A Rupert technician can also do this check with you during a home visit, if you'd rather not be alone in front of the screen.

What should I do if I have doubts about a website and I live alone?

Do not click on anything and do not share any information while the doubt remains. You can book an in-home visit so a technician can check the situation with you and show you how to spot the next warning signs.

All articlesOctober 14, 2026 · 4 min read

How to Check If a Website Is a Scam

In short

To check if a website is a scam, start by looking at the address: is there an https, is the domain name spelled correctly, are there no typos in the URL. Be wary of any message pressuring you to pay quickly or hand over a password…

The telltale signs of a fraudulent website

A sketchy website often shows several warning signs at once. Here are the most common ones to watch for:

An address that looks like a real company, but with a letter changed or a word added
Spelling mistakes or a translation that sounds off
A message announcing a prize you won without ever entering a contest
A request for payment by gift card or urgent money transfer
A button pushing you to download an unknown file or app

If two of these signs show up together, it is best to close the page without clicking on anything.

Checking the address and the security certificate

Before entering any personal information, look at the address bar at the top of your browser. A secure site starts with https and shows a small padlock icon. But be careful: a padlock does not guarantee the site is legitimate, it only means the data travels in encrypted form.

Also compare the domain name with the one you already know. For example, a bank will never use a domain ending in strange letters or words after the main name. If in doubt, type the address yourself into the browser instead of clicking a link received by email or text message.

Common traps: urgency, winnings, and fake tech support

Online scams almost always play on urgency or fear. A message claiming your computer is infected, that a package is held up, or that an account will be closed within hours is trying to make you act fast, without thinking it through.

A real service, whether from a bank or a government agency, never asks for a password by email or demands immediate payment by gift card. If a call or message creates that sense of panic, hang up or close the window, then take the time to verify through another channel, such as calling the official number listed on a recent bill.

What to do if you have already clicked or paid

If you clicked on a suspicious link or entered information, change the password for the account in question as soon as possible. If a payment was made, contact your financial institution right away to report the situation.

It is also a good idea to have the device checked by someone you trust, especially if a file was downloaded. A tablet or computer can keep traces of a fraudulent website even after the page has been closed.

A check done with you, at home

For many seniors, reading a web address or spotting a fake padlock takes a trained eye. That is exactly what a technician can do with you, sitting right next to the device, without rushing. Before the visit, the technician calls to understand the issue, then comes to the person's home for an hour rupert.ca/a-domicile. After the visit, they note down the work done and leave a few tips to help avoid the situation happening again.

The same visit can also cover other tech needs, like setting up equipment such as a computer, printer, or security camera, in addition to checking a suspicious website. The service covers the Greater Montreal area, meaning the South Shore, the North Shore, Laval, and Montreal; an address further away can still book a visit, and we call back to confirm the trip. To see if your area is covered, check the service areas page.

For seniors' residences

Residence management teams who want to help their residents guard against online scams can request on-site support, by quote, as part of the In-Residence program. This program contributes to digital fraud prevention directly with residents rupert.ca/aines.

If you or a loved one have doubts about a website right now, the simplest option is to book a visit so a technician can look into it with you. More practical tips are also gathered on the blog.