What is a lookalike domain?

A lookalike domain is a web address designed to resemble one you recognise, perhaps by changing a letter or adding familiar brand words. The page behind it can copy a bank or shop, even though the address is different. Check through a trusted route before signing in, rather than trusting a familiar logo. 12

By Secordit. Last checked: 7 November 2026.

Go to the steps · All glossary terms

How it works

  1. A criminal creates an address that resembles a familiar brand. 12
  2. A text, advert or email sends you to it. 12
  3. A copied page asks for login details, personal information or payment. 12

Real UK example

Which? reported on imitation Tesco, Amazon and Boots websites in 2026. One text promoted a supposed Tesco reward programme and linked to a branded fake page.

Another copied Amazon’s login page. The reporting shows why a familiar logo and brand name in a link are not enough. 1

Warning signs

  • An address contains a familiar brand but does not match its genuine site. 12
  • Links to contact or company information do not work. 12
  • A message takes you to an unexpected login form. 12
  • A promotion asks for information before you can verify the organisation. 12

What to do now

  1. Stop using the page if the address or request is doubtful. 12
  2. Open the genuine app or type the known address yourself. 12
  3. If you entered a password, change it through the real service and wherever else you used it. 12345

UK reporting and support

  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 678
  • Report fraud or hacking in England, Wales or Northern Ireland to Report Fraud. In Scotland, call Police Scotland on 101. 79
  • If someone is in danger, call 999. 9

How to protect yourself

  • Use saved bookmarks or genuine apps for important accounts. 12
  • Check the whole address, not only the brand word. 12
  • Do not treat an encrypted connection or padlock as proof of a trustworthy business. 12

Frequently asked questions

How do I check a suspicious web address?

Do not use its link to check. Open the organisation’s genuine app or use contact details you already trust. 11011

Does a padlock prove a website is genuine?

No. It indicates an encrypted connection, not that the organisation behind the site is trustworthy. Scam sites can use encryption too. 1

Can an email address be a lookalike too?

Yes. Report Fraud describes criminals creating email addresses very similar to genuine business addresses for payment-diversion fraud. 2

Matching kit

Account Lockdown Kit · £19 · Digital download.

A self-serve guide to securing email, phone and online accounts. It does not promise to stop every attack.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. Which?, Scam websites: Tesco, Amazon and Boots impersonation warning - Which?. Accessed 7 November 2026 (Europe/London).
  2. Report Fraud, Mandate fraud - Report Fraud. Accessed 7 November 2026 (Europe/London).
  3. NCSC, Recovering a hacked account | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).
  4. NCSC, Top tips for staying secure online | Turn on 2-step verification (2SV) | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).
  5. ICO, 23andMe fined £2.31 million for failing to protect UK users’ genetic data | ICO. Accessed 7 November 2026 (Europe/London).
  6. UK Finance, Authorised Push Payment Fraud Reimbursement | UK Finance. Accessed 7 November 2026 (Europe/London).
  7. Report Fraud, Report Fraud alert: Police forces being impersonated in scam calls using ‘spoofed’ phone numbers - Report Fraud. Accessed 7 November 2026 (Europe/London).
  8. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 7 November 2026 (Europe/London).
  9. Police Scotland, How to report a crime - Police Scotland. Accessed 7 November 2026 (Europe/London).
  10. Report Fraud, Criminals steal £101 million through Payment Diversion Fraud as City of London Police issues warning to businesses and the public - Report Fraud. Accessed 7 November 2026 (Europe/London).
  11. Report Fraud, Vishing - Report Fraud. Accessed 7 November 2026 (Europe/London).