● MEDIUM RISK

Typosquatting Scam

A fake site lives one keystroke from a real one — "paypa1.com," "arnaz0n.com" — close enough that a glance or a fat-fingered URL lands you there. It exists to capture logins and payments. Slow down on the address bar, and treat a link's text as a claim, not a destination.

Losses: Part of data theft, credential harvesting, and phishing losses

Targets: Anyone who types URLs manually or clicks links quickly

Updated: 2026-01-07

Also known as: Lookalike Domain · URL Hijacking · Domain Spoofing · Combosquatting

How It Works

Scammers register domains that look almost identical to legitimate websites. **Common techniques:** 1. **Typos**: gooogle.com, amazn.com, walmrat.com 2. **Letter substitution**: paypa1.com (number 1 for letter l), arnazon.com (rn looks like m) 3. **Added words**: amazon-deals.com, paypal-login.com 4. **Different TLD**: amazon.co (instead of .com), google.net 5. **Homoglyphs**: Using Cyrillic or other characters that look like English (аmazon.com) **What these sites do:** - Display login pages identical to real sites → steal credentials - Prompt downloads → install malware - Show fake order pages → steal payment info - Redirect to scam sites - Display ads for revenue (less malicious but still deceptive)

How Scammers Make Contact

Mistyped URLsPhishing emailsSearch adsSocial media links

Warning Signs & Red Flags

URL has a typo or looks slightly off
Login page asks for more info than usual
Site certificate warning in browser
Site design is slightly outdated compared to real site
Prompted to download something unexpected
URL uses unusual domain extension
Site found through search ad rather than organic result
Clicking a link from email lands on unfamiliar domain

Real-World Example

"I typed 'wellsfagro.com' instead of 'wellsfargo.com' by accident. The site looked identical to Wells Fargo's real site. I logged in before noticing the URL was wrong. The scammers tried to transfer $8,000 out of my account that night. Luckily, Wells Fargo's fraud detection caught it."
— Better Business Bureau Scam Alert

How to Protect Yourself

Bookmark important sites rather than typing URLs
Always check the URL in the address bar before entering credentials
Look for HTTPS and valid certificates (lock icon)
Be careful when typing — slow down for important sites
Use a password manager — it won't autofill on fake sites
Don't click login links in emails — navigate directly to sites
Use browser security features that warn about suspicious sites
Be extra careful with shortened URLs (bit.ly, etc.)

What To Do If You're a Victim

1If you entered credentials, change that password immediately
2Change password on any site where you used the same one
3Enable 2FA on affected accounts
4Run antivirus if you downloaded anything
5Monitor accounts for unauthorized access
6Report the fake domain to Google Safe Browsing
7Report to the legitimate company being impersonated
8Report to FTC at ReportFraud.ftc.gov

Report This Scam

FTC Report Fraud FBI IC3 Identity Theft

Frequently Asked Questions

What is Typosquatting Scam?

What are the warning signs of Typosquatting Scam?

URL has a typo or looks slightly off. Login page asks for more info than usual. Site certificate warning in browser. Site design is slightly outdated compared to real site. Prompted to download something unexpected.

How do I protect myself from Typosquatting Scam?

Bookmark important sites rather than typing URLs. Always check the URL in the address bar before entering credentials. Look for HTTPS and valid certificates (lock icon). Be careful when typing — slow down for important sites.

What should I do if I'm a victim of Typosquatting Scam?

If you entered credentials, change that password immediately. Change password on any site where you used the same one. Enable 2FA on affected accounts. Run antivirus if you downloaded anything.

How serious is this threat?

We rate this a real but moderate risk. Reported losses: Part of data theft, credential harvesting, and phishing losses. Most exposed: Anyone who types URLs manually or clicks links quickly.

Can I get my money back?

Recovery depends on how you paid. Credit card payments may be reversed through chargebacks, while wire transfers and cryptocurrency are rarely recoverable. Report immediately to your bank and file complaints with the FTC at reportfraud.ftc.gov and the FBI IC3 at ic3.gov.

How do I report Typosquatting Scam?

Report to the FTC at reportfraud.ftc.gov. For internet crimes, file with the FBI IC3 at ic3.gov. For identity theft, visit identitytheft.gov. You should also contact your local police and your bank.

Sources & References

Related Scams

AI-Enhanced Phishing

Phishing used to give itself away with broken grammar. AI fixed that. The emails are now clean, personalized, and plausible, which means the old "look for typos" advice is dead. Verify any request through a channel you control, not the one that contacted you.

Fake Online Store

A storefront with real-looking products and unreal prices takes your payment and either ships nothing or sends a counterfeit. Many are built fast and abandoned just as fast. Pay by credit card so you can dispute it, and be wary of a brand-new site selling brand-name goods for a fraction.

Fake Data Breach Notification

A phishing email impersonates a breach alert — "your data was exposed, reset your password here" — and the link goes to a fake login or "identity protection" page built to capture credentials. The irony is the point: it weaponizes your fear of being hacked. Go to the real site directly, never through the email's link.

Think you've encountered this scam?

Use the free AI scanner to analyze suspicious messages, websites, or phone numbers.

Scan Now — It's Free