Active Alert: MIT Federal Credit Union will never text, email or call you asking for personal or account information. Never click a link or download an attachment from someone you don't know. Fraud is on the rise; learn how to protect yourself. Learn more

Important note: In the aftermath of Hurricane Milton and Helene, MIT FCU is here to help. If you have been affected by the storm and need support, please get in touch with Member Services at (781) 423-2022 or email us at info@mitfcu.mit.edu.

Mobile Banking Alert: Mobile banking is experiencing intermittment outages. We apologize for any inconvenience.

Go to main content MIT Federal Credit Union

Join now

MIT FCU image
MIT FCU image
« Return to "Blog"

Six Ways to Tell if a Website is Safe

Authored By: MIT FCU

In today’s world, where we get our furniture, news and entertainment through the internet, staying safe online is paramount. The web is rife with scammers employing sophisticated tactics to get at your money and your information. Unwittingly visiting an unsafe website can lead to scammers installing malware in your device, which can include spyware that finds your financial information and delivers it to the scammers, as well as ransomware, which can hold your device and data hostage for a steep fee. Each of these can result in scammers emptying your accounts, taking out new loans and lines of credit in your name and, ultimately, committing identity theft with your personal information.

Fortunately, with the right steps and protective measures, you can easily avoid unsafe websites. Here are six ways to tell if a website is safe and secure.

  1. Look for an SSL certificate 

Secure websites will have an SSL, or a Secure Sockets Layer. An SSL is a digital certificate that verifies a website is authentic and will automatically encrypt all personal information and financial data. There are two primary indicators of an SSL, both of which are easily visible in the site’s URL that’s displayed in your web browser:

  • An ‘s’ after the ‘http’
  • A padlock icon

It’s important to note that most browsers will hide the beginning of the URL, which generally includes these two indicators of an SSL. However, you can easily read the entire URL by copying and pasting it to another tab, a Microsoft Word document or a Google Drive doc. Some browsers will also reveal this info if you hover over the left-hand side of the URL. In addition, clicking on the padlock icon will reveal more information about the site’s security.

  1. Evaluate the URL structure

Next, look at the URL carefully. Are there any misspelled words? Does the URL mimic a well-known site or retailer? Scammers will often lure victims by creating bogus sites that look like they represent well-known companies. However, careful scrutiny of the URL will reveal basic spelling errors that give the scam away. You may also find that the site, which allegedly represents a famous company, belongs to a public domain, such as Gmail or Yahoo, as opposed to a private business domain, like Amazon.com. This, too, will tell you that you’re likely looking at a scam.

  1. Look for the company’s contact info

Legitimate companies are eager to have you connect with them for any reason. They’ll generally display their contact information on their home page or provide a link through which to easily access it. Scammers, on the other hand, try to keep themselves as invisible as possible. You likely won’t find any tabs that say “Contact Us” or “About Us” on their website. You may find their email address on their site, but a phone number and street address will be glaringly absent or clearly made up.

  1. Check the spelling and graphics

Authentic companies will take the necessary steps to make a professional impression on visitors to their website. Scammers, on the other hand, will not. Use their carelessness to your advantage by looking out for spelling mistakes and typos throughout the site. You can also be on the lookout for cheap design elements, including images that are clearly not original and logos that are poorly created. Each of these clues can signify a scammy website.

  1. Heed your device’s security warnings 

If you enter a site’s URL into your computer and a warning pops up to alert you that the site you’re attempting to access is not safe, do not ignore it. You can choose to advance to this site, or back out. Unless you’re absolutely sure the site is secure despite the warning, it’s best not to choose to advance to the site. Websites that are flagged by devices generally do not pass the most basic security tests as detailed above.

  1. Opt out of sites that flood you with pop-ups and links

Scammy websites will try to trick you into downloading malware through pop-ups and embedded links. Sometimes, the links will be used to generate ad revenue through clicks. Whatever the intent, it’s important to know that reputable sites will not flood your screen with pop-ups and random links for you to click. If you encounter a site like this, you’re likely looking at a scam and should exit as soon as possible. Then, close your browser and have your security system run a scan on your device to find any possible vulnerabilities or safety breaches.

Don’t get stuck on an unsafe site! Use the tips here to stay safe.



« Return to "Blog"
Headset sitting on an opened laptop

Tech Support Scams

Tech support scammers use many different tactics to trick people. Spotting these tactics will help you avoid falling for the scam.

Read More

Computer with a warning sign on the screen

Get Rich Scams

How do successful, financially intelligent people fall prey to investment fraud? Researchers have found that investment fraudsters hit their targets with an array of persuasion techniques that are tailored to the victim’s psychological profile. Here are red flags to look for.

Read More

Woman thinking and looking at computer screen

Six Ways to Tell if a Website is Safe

Don’t get stuck on an unsafe site! Use the tips here to stay safe.

Read More