A Polished Website Does Not Clear a Scam Check

A website is a purchase. Templates, stock photography, a domain and a payment page are available to anybody holding a card, and none of them involve a check on who is buying. Judging an offer by how the site looks measures the one thing that costs a fraudster very little.

Mistake one: reading design quality as legitimacy

The instinct is reasonable and it used to be a weak signal: a decent site implied a budget, an agency and time. That has stopped being true. Site builders ship professional templates, generated copy fills them in an afternoon, and stock libraries supply the office photographs and the smiling staff.

So the visual quality of a page tells you which tools were used and nothing about the company behind it. A polished site is evidence that somebody bought a polished template.

The effect is strongest exactly when the site looks better than the real employers you have been applying to. Real small businesses have ugly websites. Real recruiters send badly formatted emails. The correlation you are leaning on does not hold.

Mistake two: treating reviews on the site as independent

Testimonials on a company's own site are copy, written or selected by the company, and there is no mechanism by which they could be anything else.

The same goes for third-party-looking review widgets embedded in a page: those can be images, static text, or a genuine widget filtered to the good ones. Names and photographs attached to quotes cost nothing — stock portraits, or real photographs of people who never said it.

The useful version happens off the site entirely. Search the company name alongside words like scam, complaint, unpaid and refund, and look at what comes back from places the company does not control: forums, unfiltered review platforms, court listings, local news. What you want is not silence but an independent trace — people discussing this company somewhere it could not have planted them.

Mistake three: taking an address, a registration number or a logo wall at face value

Each of these can be checked in minutes, and each gets assumed instead. An address on a contact page is text. Put it into a map and look at the street view: a virtual office, a mail-forwarding service, a residential flat, or a real building occupied by an unrelated business.

A registration line is a claim about a public record, so open the register and look it up. It will tell you when the company was formed, who stands behind it, and whether filings exist. A number resolving to nothing, or to a company with a different name, is worth stopping on. What a register cannot tell you is whether the person emailing you has any connection to that company, because registration numbers get copied off real businesses.

A wall of client logos and press mentions is the cheapest to fake and the easiest to test. Pick one logo, go to that company and ask. Pick one press mention and find the article on the publication's own site rather than through the link you were given.

Mistake four: assuming a listing or a badge means somebody checked

App stores, marketplaces, ad platforms and directories all run some form of review, and none of it is the check people picture.

The error is treating presence as endorsement. A listing means an application was accepted at some point under criteria that change and you cannot see. Paid advertising means somebody paid: a result at the top of a search page is a purchase, not a rating.

Badges are weaker still, because a badge is an image file. A security seal, a verification icon, an association crest can all be copied and pasted in. The check is to click it: real seals link through to a verification page on the issuer's own site naming this specific company. If it links nowhere, it is decoration.

Similar logic covers platforms that hold your earnings before paying out, where the badge matters far less than the payout mechanism — telling a real freelance marketplace from a fake one works through that.

What is genuinely expensive to fake

Three things: time, third-party records, and people who will talk to you.

Time, because it cannot be bought. A filing history, an archive of the site as it looked in earlier years, employees whose work history at the company predates last month. Web archives are free and show what a domain used to be, which sometimes turns out to be an unrelated business.

Third-party records, because the company does not control them. Company registers, licensing bodies, court listings, regulator registers, tax registration. These are searchable, they cost $0 and no fraudster can edit them.

People, because they have to keep existing. A named person who holds a role, answers a phone number you found independently, and turns up in more than one place with a consistent history. If the only human involved is a single chat account, that is your finding.

Who is contacting you deserves separate scrutiny — how to tell if a recruiter is fake covers the person rather than the page — and the order to run all of this in is the five-minute scam check to run on any opportunity.

If you already sent money or documents because it looked real

Go back over what went across and separate money from information, because they run on different clocks.

Money moves first. The routes that can reverse a payment close in a fixed order, so start today rather than after you have finished investigating — getting money back after paying a scam has the sequence in it.

Then screenshot the site while it still exists: the pages, the contact details, the registration line, the payment page, the emails. Sites in this category disappear, and an archived copy may be all that survives.

Then check whether you reused a password. A convincing site with a login is also a way to harvest the password you use elsewhere, so change it everywhere it appears, starting with your email.

And drop the embarrassment. The site was built to be believed by people who were paying attention. That is what the build was for.

Ugly sites belonging to real local businesses

Plenty of real businesses look terrible online. The plumber with a page built a decade ago, the caterer whose only presence is a social account, the agency with typos and a free email address are all normal. Judging them on production values would cut you out of ordinary local work, which is where a lot of first jobs come from.

A scrappy site attached to a real person, a real address, a traceable history and customers who will speak to you is a stronger position than a beautiful site with none of that.

So the replacement rule is not trust ugly and distrust polished. Appearance carries no information in either direction, and the whole weight moves onto the checks that cost the other side something.

Before you send anything to anybody, run one of those checks. Look up the registration, call a listed client, or find the person somewhere other than the website.