Not every website is what it appears to be. Criminals create convincing fake versions of real websites to trick people into entering their login details, banking information or personal data. Knowing what to look for takes seconds and can save your business from serious harm.
Look for the padlock
The padlock icon in the address bar at the top of your browser means the connection between your device and the website is encrypted. No padlock, or a browser warning, means you should not enter any sensitive information on that page.
That said, a padlock alone does not mean a site is trustworthy. Fake websites can also have padlocks. It confirms the connection is secure, not that the site itself is legitimate.
Check the web address carefully
Look at the full address in your browser bar before entering anything. Criminals often create fake sites with addresses that look almost identical to the real thing, replacing a letter with a number or adding a word to a familiar domain.
A fake banking site might use something like www.fnb-secure-login.com instead of www.fnb.co.za. Always check the full address, not just the beginning.
Be suspicious of links in emails
One of the most common ways people end up on fake websites is by clicking a link in an email. If an email asks you to log in somewhere or verify your account, do not click the link. Open a new browser tab and navigate to the site yourself.
Legitimate organisations do not send urgent emails demanding you click a link and enter your password immediately.
When in doubt, stop
If something feels off, trust that instinct. Contact the organisation directly through a number or address you already have on record, not one from the email or the suspicious page. For a more detailed look at the most common trick criminals use, see our guide on how to spot a fake login page.
The right security tools can block malicious websites before your staff even reach them, removing the risk that a momentary lapse in judgement causes a serious problem. If your business relies on staff making the right call every single time, that is a risk worth addressing.