It’s probably in here.

1. 1.Copy the address from your browser’s address bar. Don’t retype it from an advert or a message.
2. 2.Paste it into Check a website.
3. 3.Confirm the exact address we show you. A lookalike can differ by one letter.
4. 4.Wait for the stages to finish, then read the findings as well as the band.

It’s free, and you don’t need an account.

A result covers one target. shop.example.com and example.com are separate, and so is one seller’s path on a shared platform. A clean result for one tells you nothing about the other.

Recent evidence is reused so the same site isn’t fetched again and again. Every report shows when it was checked. When evidence gets too old for a report, it expires and needs a new check.

A check has a time limit, so a slow site can end with partial results. The report says which checks finished. Anything that didn’t finish counts as unknown, and unknown is never a good sign.

Scam Finder runs on a fixed budget, so checks have limits and can pause when capacity runs out. The page tells you when that happens. Try again later.

Contact your bank or payment provider first. Already paid? gives you a plan for how you paid. A check can’t recover money.

1. 1.Evidence raises concerns: serious evidence, each piece with its source and date.
2. 2.Some concerns to investigate: findings worth checking before you pay.
3. 3.Not enough evidence: we can’t say either way, usually because a required check couldn’t finish.
4. 4.No notable concerns found in this check: every required check finished and nothing notable came up. Read its limitations.

Reading a report walks through a full example.

No. It describes what this check found on the date shown. Scam Finder never certifies a site as safe, and a site can change the day after it’s checked.

It isn’t a verdict. It means the listed evidence passed automated checks, and the sources are there for you to read. If you think a finding is wrong, challenge it.

A required check failed, the site’s language or type isn’t supported, or the evidence conflicts. The report lists what’s missing.

This result is common on new sites. Treat it as a gap, and don’t read it as good news.

They describe what happened when we tried to reach the site. None of them means it’s a scam, and none of them is a sign it’s fine.

A number would suggest precision the evidence doesn’t have, so results are sentences backed by sources. If you see “4 of 5 required checks completed”, that counts checks finished and says nothing about how safe the site is.

No. Automated findings and community experiences sit side by side and are never combined. The same rules apply to every site, whoever asks and whether or not it’s claimed.

1. 1.Sign in with the link we email you.
2. 2.Open the page for the exact website and start a new experience.
3. 3.Choose what kind of contact you had and the month it happened.
4. 4.Pick an outcome: positive, mixed, negative or unresolved.
5. 5.Write a title and what happened. Add issue tags if they fit.
6. 6.Declare any connection to the site or any incentive you received.
7. 7.Agree to publish and submit. You’ll get a receipt that shows the status.

The community guidelines cover what belongs in one.

1. 1.Positive: it went as promised.
2. 2.Mixed: some of it went wrong.
3. 3.Negative: it went badly.
4. 4.Unresolved: it isn’t finished, such as a refund you’re still waiting on.

There are no stars. You don’t have to accuse anyone of a crime, and it’s better if you don’t. Say what happened.

Automated systems screen it and decide. No person reads it first. It ends in one of these states, always with a reason:

1. 1.Published as your attributed account.
2. 2.Changes requested, with the specific problem.
3. 3.Evidence requested, with a deadline to respond.
4. 4.Rejected under a named rule.
5. 5.Withheld, if the system can’t reach a decision it can support.
6. 6.Paused, if the service is at capacity.

Status appears in your account. If you miss a deadline, the submission closes without being published. You can appeal a decision.

No. A negative experience doesn’t need proof just because it’s negative. You can add private evidence if you want. It’s never shown publicly.

If an optional document passes automated checks, your experience may show “Document relevance checked automatically”. That doesn’t prove the document is authentic or the story is true. There’s no verified-purchase label.

Open it from My experiences and save your changes. Each edit creates a new revision and goes through the same automated checks. The earlier version normally stays up until then, unless it has a privacy problem or a material error.

Your original date stays, the update gets its own date, and an edit doesn’t move your experience up the list.

You get one current experience per website. Update the one you have, with the new date and what changed.

Choose “Reviewer reports resolved” on your experience. That adds a dated status and leaves your outcome as it was.

Only you can do this. A company can’t mark it for you, and a refund doesn’t oblige you to remove anything.

Withdraw it from My experiences. It’s hidden immediately. Bringing it back needs a fresh automated decision.

Your pseudonym, the experience itself and the month it happened. Your email and any private evidence stay hidden, including from the company.

Your own words can still identify you, so leave out order numbers, names and addresses.

New submissions have a daily limit, and they pause when automated checking is at capacity. The form says so before you send anything, and you can keep your draft. Corrections and privacy reports stay open during a pause.

1. 1.Sign in, then start a claim from For businesses with the exact address.
2. 2.Choose the DNS record or the file challenge. Each one is random and short-lived.
3. 3.Publish it on your domain or website. Ask whoever runs your site if you can’t do this yourself.
4. 4.Run the check. If it passes, your page shows “Website control checked”.

Claiming is free.

No. Only the DNS or file challenge counts, because it shows control of the website. An email address or an identity document can’t replace it.

No. A claim covers that exact target. Control of a subdomain or path doesn’t extend to the parent or to its siblings, so each one needs its own claim.

Someone passed a challenge showing they control that exact website on the date shown. It doesn’t tell you who they are or whether they’re honest. A scammer can pass it on their own site.

You can propose factual profile updates, post one reply per experience and track your cases. Correct your page and Replying to reviews cover both.

You can’t hide or edit experiences, change findings or buy anything. A claim has no effect on your result.

Not by claiming, and not by disagreeing with it. Reply once with the facts. If it breaks a specific rule or contains a specific error, challenge it. Anyone can do that, claimed or not.

Offering a refund in return for removal is against the rules.

Claims are rechecked from time to time, and after a suspected transfer or a security problem. If the check fails or lapses, your powers stop until you pass the challenge again. Replies you’ve already posted keep their date and attribution.

Competing claims are settled by a new challenge for each side. If control can’t be settled, the site ends up unclaimed with editing suspended. No email to us can override that.

You don’t need an account, a claim or a payment.

1. 1.Open the page and find the exact statement.
2. 2.Use the correction option beside it.
3. 3.Say what’s wrong and what it should say.
4. 4.Add evidence and contact details if you want to. Both stay private.
5. 5.Keep the case link you get. It’s how you follow the case.

The corrections and appeals policy has the full rules.

Be specific: quote the statement, then show what contradicts it. An official record or a dated source helps. A company objecting isn’t evidence on its own, and many reports repeating the same objection don’t count for more than one.

1. 1.Upheld: the statement is corrected or withdrawn.
2. 2.Partly upheld: the affected part is corrected.
3. 3.Not upheld: it stays, and you’re told why.
4. 4.Insufficient support: the disputed interpretation is withheld and the supported facts stay.

The decision is automated and labelled as automated. A correction reaches the page, search results and any sent alerts it affects.

Challenge the statement and choose the privacy reason. Credible private-data exposure can be restricted right away, before the case closes. Corrections and privacy reports stay open even when other submissions are paused.

No, and your challenge still counts. Without contact details we can’t send you a private follow-up, so keep your case link safe. Anyone who has that link can open the case.

1. 1.Open the case from your decision notice, your case link or Cases and appeals in your account.
2. 2.Check the appeal deadline on the decision.
3. 3.Explain why it’s wrong and add anything new.
4. 4.Submit. You’ll get an outcome with reasons in the same case.

Each decision gets one appeal at a time.

No. Appeals are automated. A separate evaluator looks at the original evidence and your reasons, and it doesn’t treat the first decision as correct. We don’t offer a human panel.

Your legal rights are separate from this process. A formal notice goes through Contact.

Material new evidence can reopen a case after the window closes, so open the case and add it. Legal and privacy rights aren’t limited by the appeal window.

The system couldn’t reach a decision the evidence supports, so the case closed with reasons instead of waiting indefinitely. New material evidence can reopen it.

Restrictions step up from a warning to a short cooldown to a longer suspension. Each one comes with a reason and an expiry date, and you can appeal it.

While restricted, you can still read, check websites, export your data, delete your account and appeal.

Enter your email on Sign in, open the link we send and confirm on the page it opens. There’s no password to remember or to reset.

You need an account to publish, claim a site, save websites or set alerts. Checking and reading don’t need one.

Check spam, then ask for a new link. Links work once and expire quickly, so an old one won’t open. The page says the same thing whether or not the address has an account, which stops strangers testing emails.

No. It shows you can open that inbox. It doesn’t verify your identity or show that you bought anything.

No, accounts are private by default. A public profile is optional, and you can preview it before turning it on. Making it private later doesn’t withdraw experiences you’ve published, and those keep showing your pseudonym.

Appearing in community discovery is a separate choice.

Use your account settings. You’ll need to sign in again recently and prove the new address, and the old address gets a notice.

Sign-in runs through your email, so we can’t hand an account to someone who has lost access to the inbox. Try to recover it with your email provider. Changing the email on an account with a claim suspends the claim until it’s rechecked.

Your account settings list your sessions, and you can revoke them there. Do this straight away if you think someone else has access.

Use the export option in your account’s privacy settings. You’ll need to have verified recently. The export contains your own data only, including experiences, saved websites, collections, notes and preferences.

Use the delete option in your account’s privacy settings. You’ll need to have verified recently. Your profile is hidden and your sessions end straight away. Your published experiences are withdrawn by default, and your alerts and reminders are cancelled.

Your data is purged after a short grace period. Anything that must be kept by law stays private. The privacy policy has the retention periods.

1. 1.Sign in and press Save on the website’s page.
2. 2.Open Saved websites in your account.
3. 3.Turn on email alerts for that site. They’re off until you do.

Saving and alerts are both free. Your saved list is private, and you can export it.

Only material changes: an approved band change, a significant published correction, a supported change of identity, or a new independent threat listing. Each alert shows what changed, the dates and the limitations.

You won’t get alerts for cosmetic changes, reworded text or allegations still being decided.

No. Saved websites are rechecked on a schedule, alerts can be grouped into a digest, and your saved list shows if monitoring is delayed or paused. Don’t rely on an alert to protect a payment. Check before you pay.

Use the unsubscribe link in any alert, or turn alerts off in Saved websites. Unsubscribing leaves your account in place. Removing a site cancels any mail waiting to go out about it.

If an alert is corrected, people who received it are sent a correction, subject to their preferences. To dispute the finding itself, challenge it.

Alerts are emails about saved websites. Reminders are optional follow-ups on experiences you marked unresolved. Notifications are the in-app list of decisions, replies and account events.

Each one has its own setting. Turning one off leaves the others as they are, and reading or dismissing a notification changes nothing else.