Account security · QUICK REFERENCE
Recognising a lookalike address
Read the actual address before trusting a page's branding. Small spelling changes, extra words and misleading subdomains can make an unrelated address resemble a familiar one. If uncertain, leave the message and navigate through a known, independently verified route.
A practical checklist
- Inspect the full hostname.
- Do not rely on the page title or padlock alone.
- Compare with a previously verified address.
Putting it in context
A familiar name appearing before an unrelated domain does not make the destination part of that organisation. The meaningful address is the one the browser is actually visiting.
Keep in mind
Visual similarity is a warning to investigate, not sufficient evidence about who controls a site.
References & further reading
The checklist and examples are original editorial guidance. External links provide background within their stated scope; they do not validate an individual operator or case.
- NCSC: staying secure onlineUnited Kingdom · account-security guidance
- NCSC: phishing guidanceUnited Kingdom · suspicious-message guidance
About this edition: how the content is made · corrections & limitations