Deepfake Detective
I’m a victim Learn Fake website check
Website spoofing AI-generated clones

Is this website real—or an AI-generated fake?

Scammers now spin up convincing copies of real brands in minutes: same colours, similar logo, even AI-written “about us” pages. Before you enter a password or card number, pause and run this quick check.

Imposter bank & delivery sites Fake log-in portals AI-written “about us” pages
If you got here from a text, DM, or email, don’t log in through that link until you’ve checked the site.
URL & domain AI content clues Checklist Verify safely If you clicked

1. Start with the URL & domain

Real organisations protect their main domain like gold. Fake or AI-generated sites often get close—but not quite right.

What to look for

  • Spelling glitches & add-ons.
    Extra words like -secure, -verify-id, or random numbers tacked on.
  • Unexpected domain endings.
    If your bank is always .com, be suspicious of a sudden .help or .xyz “log-in”.
  • Check just before the first single slash.
    In https://login-mybank.com.security-check.net, the real domain is security-check.net, not “mybank”.

Example: likely real vs suspicious

Compare carefully—especially on a small phone screen.

Likely real

https://www.examplebank.com/login

Suspicious

https://examplebank-secure-verifyid.com/login

If the address feels “off”, treat the whole site as untrusted until you can confirm it from an official source.

2. Spot AI-generated text & visuals

AI can copy a company’s tone, but it often leaves small glitches behind. Those glitches are your early warning system.

Text clues

  • Generic, copy-paste promises.
    “We are committed to excellence in all that we do” repeated everywhere is classic AI filler.
  • Contradictions inside the same page.
    Claims they are a “small local team” and “global leader” at once.
  • Invisible humans.
    No real address, no named team members, just stock-looking headshots and vague bios.

Visual clues

  • Odd images & fake seals.
    Warped logos, messy text on badges, extra fingers, or graphics that mimic government / bank seals but aren’t quite right.
  • Testimonials with first names only and no way to verify them.
  • Blog posts that all sound identical, just shuffled buzzwords.
  • Contact form only; no phone number, no physical address.

One quirk on its own doesn’t prove anything. Seeing several together is a strong signal to slow down and verify elsewhere.

3. Quick fake-website checklist

Use this any time you land on a site from a text, DM, QR code, or email. If you hit multiple red flags, close the tab.

URL & domain
Does the address look slightly “off”?
  • Extra words like -secure or -refund-portal.
  • Brand name plus random numbers.
  • Different ending than you normally see.
Urgency & fear
Is it trying to rush or scare you?
  • “Your account will be frozen in 1 hour.”
  • Threats of police / legal action if you don’t pay.
  • Countdown timers for “verification”.
Data they want
Are they asking for too much, too soon?
  • Full SSN or ID upload for a simple inquiry.
  • Card PIN or online banking password.
  • Crypto seed phrase (never share this, anywhere).
Company footprint
Does this company exist off this site?
  • No official app in app stores.
  • Only scam reports when you search the name.
  • All links just loop back to the same site.
Visual details
Do graphics feel “almost right”?
  • Stretched or blurry logos.
  • Bad copies of bank / government badges.
  • Inconsistent fonts and button styles.
Gut check
Does something just feel off?
  • Your instincts are data. Don’t ignore them.
  • When in doubt, back out and verify.
  • Real companies won’t punish you for being careful.

4. How to verify a site safely

Treat this like a mini background check before you trust a website with sensitive information.

  1. Search the company yourself.
    Type the organisation’s name into your browser and click the result you recognise, instead of the link you were sent.
  2. Use an official app or saved bookmark.
    For banks, social media, or delivery services, go through their official app or a bookmark you created earlier.
  3. Confirm using a known phone number.
    Call the number on the back of your card or a previous statement, not the one listed on a suspicious page.
  4. Check independent reviews.
    Search the company name plus “reviews” or “scam”. Only complaints? That’s a sign to stop.
  5. Ask someone you trust.
    Screenshot the page (without clicking anything) and ask a tech-savvy friend or coworker for a second opinion.

A real company won’t mind you double-checking

Scams rely on panic. Real support agents and real businesses understand when you say:

“I’m just going to confirm this through your official app / number before I continue.”

If they shame you, threaten you, or insist you “must act now”, that’s one of the clearest indicators you’re dealing with a scam.

5. If you already clicked or entered info

It happens to smart, careful people every day. The key is what you do next.

Damage control checklist
  1. Close the suspicious tab. Don’t click more buttons on that site.
  2. Change passwords for any accounts you might have exposed, starting with email and banking.
  3. Turn on multi-factor authentication (MFA) wherever possible.
  4. Contact your bank or card provider and explain what happened; ask them to watch for fraud.
  5. Take screenshots and save messages / URLs in case you need to report the scam.

If a fake site is impersonating a real brand, report it to that company and through your country’s cybercrime reporting channel.