Step 1: separate the story from identifiers
Read the homepage once, then stop following the slogans. Look for details that can be checked: legal name, country, address, registration number, contacts, terms, privacy information and any claimed authorisations. Copy them exactly. Professional tone, page count and logos do not carry the same evidential weight as data that can be checked elsewhere.
Step 2: check the entity, not only the brand
Search the legal company name in relevant registers rather than relying on the trading name alone. If you find a match, compare office, activity and identifiers. A company’s existence is useful information, but it still does not answer whether that company actually operates the website in front of you.
Step 3: test the link between website and authorisation
If a financial authorisation is claimed, use the competent authority’s register to see what the entity is permitted to do and under which name. Then look for an independent connection to the domain. Confusion often arises when a page quotes a real registration number or real intermediary name without demonstrating that the page belongs to that intermediary.
Step 4: search warnings, but do not reverse the logic
Authority warnings matter because they are primary public records. If you find one, read the full notice and compare names and domains. If you find none, do not treat the absence as a positive judgement: no warning list should be read as a complete catalogue of everything that is safe or unsafe.
Step 5: write a conclusion that can be corrected
A useful conclusion is specific and revisable: “Company X appears in register Y; I found no primary link between that company and domain Z; I did not locate a warning under this exact name on the date checked.” It is less dramatic than “safe” or “scam”, but far more robust because it shows the evidence and what could change.
An editor would also check who stands behind the statement
Before publishing an important claim, a newsroom asks who signed it, where the data came from and who is accountable. Apply the same logic to a website. Is there an identifiable entity behind the terms and privacy notice? Are the contacts independently checkable? Do important claims point to original documents or only to other pages in the same ecosystem? The more costly or irreversible a decision is, the more useful a clear chain of responsibility becomes.
Check consistency over time as well as across pages
A website may be internally consistent today while telling a different story from documents you received weeks earlier. Compare dates, legal names, addresses and terms. Change can be legitimate, but it should be explainable. A new company or domain does not automatically inherit the history of the previous one.
Ask what evidence could change your current impression
People naturally search for confirmation of what they hope or fear. Counter that by asking the opposite question. If you think the site is authentic, what independent evidence should exist? If you suspect it is not connected to the claimed company, what primary document would prove the connection? Balanced research gives both possibilities a chance to be supported.