Is This Legit? A Step-by-Step Way to Investigate Anything Before You Trust It

Ten minutes from now you'll either feel a little silly for worrying, or glad you checked before you paid.

That's really what "is this legit" comes down to. Not a gut feeling, not a five-star rating, not how polished the website looks. A handful of checks, run in order, either hold up in the time it takes to make coffee or they don't. People ask some version of that question about almost everything: a seller, a job offer, an investment pitch, a company that just texted them out of nowhere. The good news is the same short routine works across nearly all of it.

Here's the routine, in the order it actually catches things.

1. Look up the domain's age and registration. A business that's been operating for years usually has a website older than a few months. A domain registered in the last 90 days, paired with a big claim like "industry leader" or "trusted by thousands," is a mismatch worth noticing.

2. Run a reverse image search on the photos. Product shots, "team" headshots, and storefront pictures get reused constantly by scam operations. Save the image and search it directly, or search a screenshot of it, rather than typing a description; an image search catches matches a text search misses. If the same photo turns up on a weight-loss supplement site, a boutique fashion store, and a "recruiting" page for a job that doesn't exist, you already have your answer, and it took under a minute to find.

3. Check the business registry for the state or country it claims to operate in. Every U.S. state runs a free, searchable business filings database, usually through the Secretary of State's website, and most other countries have an equivalent. A real company that takes your money is registered under a specific name, address, and usually a listed officer or registered agent you can cross-check. If you can't find it under the exact name they gave you, or the registration is a few months old while the business claims years of history, that's not a minor paperwork gap. It's the same kind of mismatch as the domain age check, just harder for a scammer to fake convincingly.

4. Search the exact phrases from the offer, listing, or message. Scammers reuse templates across hundreds of targets. Pasting a distinctive sentence into a search engine often turns up the same scam, sometimes reported by someone else days earlier.

5. Look at how they want to get paid. Gift cards, wire transfers, crypto, or a payment app sent to a personal account are all one-way doors. A legitimate business can take a credit card, because a card payment can be disputed, and scammers avoid anything a victim can claw back.

6. Ask a direct question and watch how it gets answered. A real person representing a real business can answer specifics: a return policy, a business address, how long they've been operating. Vague enthusiasm instead of a straight answer is itself a data point.

No single check proves anything by itself. A small, legitimate business might genuinely have a new website. What matters is whether the results stack up. When two or three of these come back wrong on the same offer, that's not paranoia. That's reading the pattern correctly.

Sometimes the checks come back mixed: the domain is a year old, but you can't find the business registered anywhere. When that happens, weight the check that's hardest to fake. A scammer can buy an aged-looking template and a stock photo pack in an afternoon. Faking a business registration, a real dispute history with payment processors, or a search trail that existed before today is much harder to pull off. When in doubt, let the hardest-to-fake result decide.

This is close to the routine Scamanot runs when someone submits a URL, a business name, or a message for review, minus having to remember all six steps yourself or dig through registry sites that clearly weren't built for a general audience. Scamanot provides information to assist your own judgment. We do not guarantee the accuracy of findings or the legitimacy of any entity investigated, but a structured check beats a hopeful guess almost every time.

If something already feels like it needs a second look, that instinct is the whole reason this checklist exists. Run it before you pay, sign, or send anything. That's what Scamanot is for.