Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Don’t verify a sale through the link that brought it to you. Open the retailer’s known app or type its web address yourself, then check whether the offer and any account alert appear there. A familiar logo, a very low price, or “https” in the address does not prove the seller is genuine.
What makes a sale link suspicious?
Scammers can impersonate real companies with ads for brand-name products at unusually low prices. A link may lead to counterfeit goods, an item unlike the advertisement, or nothing delivered at all. A polished page and a recognizable logo are easy to copy.
- An unexpected message creates urgency. Be wary of pressure to claim a coupon, fix an account, confirm a payment, or act before a deal expires. The Federal Trade Commission (FTC) says legitimate companies will not unexpectedly email or text a link asking you to update payment information. FTC phishing guidance
- The link’s destination does not match its text. A link can display a legitimate-looking address while leading somewhere else. Check the actual destination before opening it; even then, treat it as a clue, not proof that the seller is trustworthy. Amazon’s fake-site guidance gives examples including numeric addresses and misspellings in addresses. Those examples concern fake Amazon sites, not a complete test for every retailer.
- The bargain seems implausible. A strikingly low price on a well-known brand can be an impersonation lure. Search the seller’s name and the exact destination URL with terms such as “review,” “complaint,” or “scam.” FTC online-shopping alert
- HTTPS is not a trust badge. It indicates an encrypted connection, not that the seller is genuine. Scam sites can use HTTPS too. FTC online-shopping guide
How to check a deal without trusting its link
- Navigate independently. Open the retailer’s app or type its known web address. If a message claims there is an order or account problem, check your account through that route rather than using the message link. Amazon, for example, advises customers to go directly to its site and check Your Orders for order questions. Amazon fake-site guidance
- Look for the offer in the retailer’s own catalog. If it is not there, research the unfamiliar seller and exact URL independently. No single technical signal certifies a shop as legitimate; if the seller or deal remains uncertain, skip it.
- Check the whole transaction, not just the headline price. Compare the item description, seller identity, shipping costs, deal conditions, delivery promise, and return or refund terms. Sale and clearance items can have different return rules. The FTC recommends checking seller information and policies before buying. FTC online-shopping guide
- Choose a payment method with a route to challenge a problem. The FTC recommends paying by credit card when possible; a card issuer may let you dispute duplicate billing, goods that never arrive, or goods that are wrong or defective. Contact the issuer promptly and follow its instructions. Be cautious if a seller insists on gift cards, wire transfers, payment apps, or cryptocurrency, which can be difficult to reverse. FTC online-shopping guide FTC online-shopping alert
- Keep the records. Save the seller’s name and website, item and order details, payment record, shipping promise, return policy, receipts, and messages. They can help with a seller dispute or payment dispute. FTC online-shopping guide
How to protect shopping and email accounts
Use a unique password and enable MFA
Use a strong, unique password for each important account, especially email: access to email can help someone reset other accounts. Turn on multi-factor authentication (MFA) for email, retailer, and financial accounts wherever it is available. MFA adds another sign-in factor, such as a one-time code from an authenticator app or another device, a security key, or a device-based factor. The FTC says MFA makes it harder for a scammer to access an account even if they obtain its username and password. FTC phishing guidance
Review the account’s recovery options and keep a backup method available. A FIDO2-compatible hardware security key is one possible physical MFA factor; it protects sign-in, but it does not verify sale links or prove that a store is real. Compatibility and recovery options vary by service.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Keep devices and security software current
Install operating-system and security-software updates. If you think a password was exposed, go to the real service directly, change it there, and change it on any other account where you reused it. Check recent account activity and saved payment details. Do not use the suspicious message to reach support; use the company’s known website, app, or phone number. FTC phishing alert
What to do after clicking a suspicious sale link
You clicked, but did not enter information
A click alone does not prove that an account was compromised. Close the page and do not download or open anything from it. If the link may have downloaded software, update your security software and run a scan. FTC phishing alert FTC phishing guidance
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
You entered a password
Visit the real retailer or email service using its known app or address and change the password. Change it anywhere else you reused it, turn on MFA if available, and review recent activity and stored payment details. Contact the company through a known-good route if you see changes you did not make. FTC phishing alert
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →You entered card or bank details, or see an unauthorized charge
Contact your card issuer or bank using the phone number on your card or its known official app or website. Ask whether to freeze or replace the payment credential and how to dispute an unauthorized transaction. Act promptly and follow the provider’s instructions. FTC online-shopping guide
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
You shared identity information
If you shared your Social Security number or other sensitive identity details, use IdentityTheft.gov for recovery steps tailored to what was exposed. Contact relevant companies through their known official channels. FTC phishing guidance
Report the attempt and keep evidence
Report phishing to ReportFraud.ftc.gov. Forward suspicious texts to SPAM (7726), or suspicious phishing emails to reportphishing@apwg.org. Keep the message and transaction records until any report or dispute is handled; then delete the phishing message. FTC phishing alert FTC phishing guidance
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What scam reports can—and cannot—tell you
The FTC reported that online-shopping scams were the second-most reported type of scam in 2022 in an April 2023 alert. That is a historical ranking for online-shopping scams overall, not a current prevalence estimate or a count specific to fake sale links. FTC shopping alert In April 2025, the FTC said email was the top method scammers used to contact people in 2024; that alert did not provide an email count. FTC contact-method alert Neither figure can establish how common fake sale links are today. The practical check remains the same: bypass the message, verify the seller and offer independently, and do not proceed if doubts remain.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Quick Recap
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
