Two Very Different Kinds of Scam
Our other safety content — like How to Buy MMO Gold Safely — focuses on vetting an individual seller on a real platform. This guide covers a different threat entirely: an entire website built to impersonate a real, trusted marketplace, designed to steal your login credentials or payment details the moment you use it.
Lookalike Domains
A common technique is registering a domain that looks almost identical to a real vendor's actual site — an extra word, a hyphen, a different extension, or a common misspelling. At a glance, especially on mobile, these can be nearly indistinguishable from the real thing.
Always check the exact address bar URL before entering any login or payment information, not just whether the page looks familiar. Visual design can be copied perfectly; the domain itself is much harder to fake convincingly.
Phishing Links in Ads, DMs and Search Results
Fake marketplace links commonly spread through paid search ads, unsolicited Discord or social media DMs, and comments on gaming forums or videos. These often use urgency ("limited time," "your order is waiting") to get you to click without checking the destination carefully.
Verification Checklist
- Type the vendor's address directly or use a saved bookmark, rather than clicking a link from an ad, DM, or comment.
- Read the full domain character by character before entering any credentials.
- Check for a valid HTTPS connection, though note this alone doesn't guarantee legitimacy — many phishing sites also use HTTPS.
- Be suspicious of urgency language pushing you to act immediately.
- Cross-reference the vendor against our vendor rankings, which link to their verified sites.
If You Already Clicked or Logged In
If you entered a password on a site you now suspect was fake, change that password immediately — on that platform and anywhere else you reused it — and enable two-factor authentication if it isn't already active. If you entered payment details, contact your card issuer or bank right away to flag the card and watch for unauthorized charges. See our refunds and disputes guide for the next steps on any related payment.
Frequently Asked Questions
How do I check if a marketplace URL is legitimate?
Compare the exact domain character by character against the vendor's official site, watch for extra words, hyphens, or different domain extensions, and always navigate by typing the address directly or using a bookmark rather than clicking a link from an ad, DM, or search result.
What should I do if I already entered my login on a suspicious site?
Change that password immediately, on that platform and anywhere else you reused it, and enable two-factor authentication if you haven't already.
Are search ads for gold sellers safe to click?
Not automatically — scammers sometimes buy search ads for lookalike domains. Verify the actual URL shown in the ad before clicking, and prefer navigating directly to a vendor's known address.