Look-alike Domain
A web address made to resemble a real one, using small changes like swapped letters or extra words.
How it appears in scam messages
A lookalike domain imitates a real brand's web address with small changes to host a fake login or payment page. One wrong character changes everything.
Example only - do not act on it
Example only: Sign in at [fake-link removed] to secure your account.
Why it matters
Look-alike domains host fake login pages that steal credentials.
Common red flags
- Unexpected contact creating urgency or fear
- Requests for codes, passwords, payment, or personal details
- Links or attachments you did not expect
- Sender or domain that does not match the real organisation
Safe next steps
- Stop and verify through official channels you find yourself
- Never share codes, passwords, or card details from a message
- Use the message checker if you are unsure
- Report and block the sender
Related scam-type hubs
Related red flags
Frequently asked questions
How can I avoid look-alike domain?
Slow down, never act on urgency, and verify through official apps or websites you open yourself. Use the free checker if a message seems off.
What if I have already been affected?
Contact your bank or the relevant provider through official channels, change any exposed passwords from a trusted device, and save evidence. See our recovery guides.