Payments & shopping
Is this payment link safe?
Not by appearance alone. Check the real hostname, whether urgency is forcing a rush, which payment rail you will use, and whether recovery is realistic if something goes wrong.
What this means for you
A polished payment page can still steal money or credentials. Treat unexpected payment links as unverified until you confirm the destination and the payment method’s protections.
Detailed explanation
Scammers send payment links by SMS, email, chat, ads, or QR codes. HTTPS and a familiar logo do not prove the merchant is real.
Focus on three checks: the exact domain (not a lookalike), whether someone is pressuring you to pay now, and whether the method offers buyer protection or chargeback options.
Bank transfers, gift cards, and crypto are hard to reverse. Card checkout or PayPal with buyer protection usually leave more recovery paths—still not a guarantee.
Fraudly can help you inspect an unfamiliar URL before you authenticate or pay. Combine that with contacting the seller through a channel you already trust.
Warning signs and signals
- Unexpected link asking for immediate payment
- Slightly misspelled brand domains or extra subdomains
- Only irreversible methods (bank transfer, gift cards, crypto)
- Threats that your order, account, or delivery will be cancelled unless you pay now
Practical verification steps
- Open the organisation’s official site or app yourself—do not follow the message link
- Compare the hostname character by character with the official domain
- Prefer protected checkout; avoid irreversible rails for unfamiliar sellers
- Scan the URL with Fraudly if the destination is still unclear
What Fraudly can and cannot verify
Fraudly cannot guarantee a payment will succeed or be refunded.
A clean scan reduces risk signals; it does not replace your judgement when money is involved.
Key trust concepts
Payment methods differ in recovery protection
Card payments and some platform checkouts often offer more dispute options than irreversible bank transfers.
Urgent payment pressure is a social-engineering signal
Real organisations rarely demand immediate payment with threats or secrecy.
HTTPS does not prove legitimacy
HTTPS encrypts the connection. It does not prove who runs the site or that the offer is genuine.
Related guides
Reviewed: 8 August 2026
This page is educational decision support. It is not legal, financial, or emergency advice.