
Impersonation pages often copy colours, logos and promotional language, so appearance alone is not enough to verify a website. Use repeatable checks before entering account details or following a registration link.
Start with the complete address
Read the domain from right to left and check spelling, punctuation and the ending. Avoid addresses delivered through unexpected pop-ups or shortened links. When in doubt, return to a previously verified bookmark rather than editing a suspicious address.
Check navigation and support links
Official pages should use consistent navigation and contact destinations. Inspect where Login, Register, Download and Support buttons lead before entering information. A sudden change to an unfamiliar domain deserves verification through a known support channel.
What to do when a page looks suspicious
Do not enter passwords, verification codes or payment information. Close the page, save the address for reporting and contact support through a channel you verified separately. Change a reused password promptly if you already submitted it.
Frequently asked questions
Does HTTPS prove a site is official?
No. HTTPS protects the connection but does not establish the operator’s identity.
Should I install an app from a message link?
Verify the destination against the official website first and follow the site’s current installation guidance.
What if I entered my password on the wrong page?
Change it immediately, avoid reusing it elsewhere and contact the relevant support channel.