10 tips to check if a website is safe

Cyber threats and online scams are on the rise across the UK. More than seven million suspicious emails and websites were reported in 2022 — nearly 20,000 per day or one in every five seconds.1

This article includes tips, suggestions and general information. We recommend that you always do your own research and consider getting independent tax, financial and legal advice before making any important decision.

It's important to know how to distinguish between a secure website and a potential scam. Whether shopping online, sharing personal information, or simply browsing the web, being able to assess a website's security can protect individuals from falling victim to possible fraud.

In this guide, explore ten basic tips that may help determine whether a website is secure or poses a potential risk.

  1. Look for the "s" in HTTPS

    Check for "https://" at the start of a URL, which indicates the presence of an SSL (Secure Sockets Layer) certificate. The "s" in "https" signifies a secure and encrypted connection, which can help protect a person’s data.

  2. Check the padlock icon

    Ensure a padlock symbol appears in the browser's address bar or the lower-right corner of the webpage. Clicking it should reveal the website's SSL certificate information, including issuer, validity, and organisation name.

  3. Verify the certificate

    A security certificate, often referred to as an SSL/TLS certificate, is a digital credential that encrypts data exchanged between a person’s web browser and a website, enhancing online security.

    To ensure a certificate is valid and reputable, click the padlock icon. Check for a recent issuance date and a future expiration date, and ensure it's issued by a well-known certificate authority. Unfamiliar issuers or expired certificates could indicate potential security risks.

  4. Double-check the URL

    When assessing website safety, it's crucial to double-check the entire URL, not just the domain name. Keep an eye out for typos, lookalike domains, or any unusual characters in the URL string.

    Cybercriminals frequently employ deceptive URLs to create phishing sites, so scrutinising the full address can help someone spot potential scams and stay safe online.

  5. Read the privacy policy

    Prior to sharing any sensitive data with a website, review its privacy policy. Make sure to understand the information collected, its purpose, and any third parties it may be shared with. Look for concerning signs like vague language, data monetization, or insufficient security measures, which could indicate potential privacy risks. Discover more tips for secure online shopping.

  6. Use security-focused tools

    Enhancing website security may be simplified with security-focused tools that automatically enforce secure connections and issue warnings for insecure websites.

    When shopping online, leveraging PayPal fraud protection may provide an added layer of security for digital transactions, safeguarding financial information and purchases from potential scams.

  7. Be cautious with downloads

    Exercising caution when downloading files from the web is essential. Limiting downloads to trusted websites and scrutinising file attributes, such as inconsistent sizes, unexpected extensions, or browser warnings, can help prevent malicious downloads and safeguard devices from potential security threats.

  8. Update software

    Maintaining up-to-date software is also critical for website security. Frequently updating one’s browser, operating system, and antivirus software provides the latest security patches, offering protection against potential vulnerabilities that cybercriminals could exploit. Learn more about how to prevent fraud when paying on a phone.

  9. Be wary of unsolicited emails and links

    Be sceptical when dealing with unsolicited emails and links. Avoid clicking on links or opening attachments from unfamiliar senders to mitigate the risk of falling victim to phishing attempts, as even seemingly secure websites can be exploited for malicious purposes.

  10. Trust one’s gut

    It’s paramount for people to trust their instincts when browsing online. If something doesn't feel right about a website, even if all the indicators seem secure, it's wise to exit. Intuition can be a powerful tool in safeguarding online security. Get more insights about how to check if a website is safe and explore types of fraud and how to prevent them.

Was this content helpful?

Related content

If you accept cookies, we'll use them to improve and customise your experience and enable our partners to show you personalised PayPal ads when you visit other sites. Manage cookies and learn more