Home · Personal · Tech & Digital Life · Privacy & security
As of 13 August 2026, AI can only partly identify whether a website is a scam.
This still needs a person who signs their name to it.
Can you do it?
5 minutesto a draft.
30 minutesto something you’d act on.
Cost, all in£0
Skill needednone
Who has to check ityou
What the alternative costsThe supplied alternatives list gives no price for a specialist website-security checker.
If this goes wrong: you trust a malicious site, enter details or make a payment, and have to contain the resulting fraud or identity theft.
What to actually do
Hand it to a person
The route this page recommends
A person who owns the outcome does this end to end, worth it when the failure is dear.
Use a tool built for this
Second choiceDo it yourself
The distant thirdA chat interface, no skill needed, and roughly 30 minutes until you can act on the result.
How to actually do it
- Copy the full website address from the browser address bar without opening links inside the page, and remove any passwords, payment details or one-time codes from the material you will share.
- Take screenshots of the page, including the address bar, payment or login requests, contact details, offers, terms and cancellation information.
- Open ChatGPT, Claude or Gemini, paste the prompt, and add the URL, screenshots and the message or advert that led you to the site.
- Ask the chatbot to separate observed facts from warnings, reassuring signs and missing evidence, then record every independent check it recommends.
- Open a separate browser tab and check the business, contact details, domain spelling and any claimed UK organisation through independent sources rather than links supplied by the website.
- Compare the chatbot's claims with those independent results and treat any mismatch, pressure to act, unusual payment request or missing business information as a reason not to proceed.
- If you entered bank or card details, contact your bank using its official app or statement number; if you entered a password, change it on the genuine service and enable multi-factor authentication.
Prompt
Assess this website for scam and phishing warning signs using only the evidence I provide and clearly label anything you cannot verify. Do not visit the site, log in, submit forms, download files or treat the site's own claims as proof. Check the URL spelling, suspicious subdomains, requests for passwords or payment, pressure or urgency, contact details, policies, copied wording, unrealistic offers and inconsistencies between the page and the message that brought me there. Separate: 1) observed facts, 2) warning signs, 3) reassuring signs, 4) missing evidence, and 5) checks I can do independently. Do not give a definitive safe or unsafe verdict. End with a cautious risk rating of low, medium or high, explain the main reasons, and tell me whether I should avoid entering information or paying until the checks are complete. Never ask me to paste passwords, payment details, one-time codes or other secrets. URL: [paste the full URL here]. Page text or screenshots: [paste or attach them here]. Message or advert that led me there: [paste it here].
Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.
What it gets wrong
- AI cannot prove who operates a website or whether its documents and testimonials are genuine.
- AI cannot reliably know whether a newly registered domain, changing page or live payment destination is currently malicious.
- AI cannot replace independent checks with the bank, the genuine organisation or an official UK reporting route.
- AI cannot carry the loss if you enter credentials, personal information or payment details after a wrong assessment.
What caps this at PARTLY: real time truth, verification cost and stakes of error.
How we scored this
Five axes, each scored nought to two by hand: ten means AI carries the task cleanly, and the thresholds that turn a total into YES, PARTLY or NO are published in the methodology. Each axis name links to its definition.
| Axis | Score (0–2) |
|---|---|
| Output | 1 |
| Inputs | 1 |
| Verification | 1 |
| Liability | 1 |
| Effort delta | 1 |
| Total | 5 / 10 |
The methodology and its thresholds are published in full.
FAQ
- Can ChatGPT tell me if a website is a scam?
- It can point out suspicious wording, URLs, payment requests and other warning signs from material you provide. It cannot confirm that a site is safe, so check the business and address independently before entering details or paying.
- Can AI check a website link before I click it?
- Yes, you can paste the link into a chatbot and ask it to analyse the address without opening it. Do not treat its response as proof, and do not open the link or download anything if the address or message looks suspicious.
- How can I tell if a website is genuine?
- Check the address carefully, look for pressure to pay or share information, and verify the organisation using a separate trusted source. A padlock or HTTPS connection does not by itself prove that the operator is genuine.
- What should I do if I entered my details on a scam website?
- Contact your bank through its official app or statement number if you shared payment details, and change any reused password on the genuine service. Keep evidence such as the URL and screenshots, and report the incident through the appropriate UK official route.
Nearby answers
Assessed by gpt-5.6-luna (gpt-5.6-luna) on 2026-08-13, second-checked by an independent model. Wrong somewhere? Email [email protected] and it gets re-checked.
The newsletter
AI news, new answers and product picks, straight to your inbox.