Look-Alike Pages and Phishing

What a look-alike page actually is

A look-alike page is a copy, or a loose imitation, of a real seller's site. Anyone can save a page's images and text and republish them under another address. The copy may even have a working checkout form. The only part that cannot be copied is the web address the page lives at, which is why that line deserves most of your attention.

Fake pages are used for two things: collecting card numbers and selling something that never arrives or is not what was advertised. A supplement page is a convenient disguise because shoppers expect bold language and bottle photos, so an overexcited tone does not stand out.

How phishing messages reach supplement shoppers

Phishing usually arrives as an email, text message, social media comment or an ad that sends you to a page. Common versions claim that an order has a problem, that a payment failed, or that you must confirm an address to receive a package. A message about an order you never placed is a signal in itself.

Another version dresses up as an offer. A post may say that ProDentim is available somewhere with an unusual deal. Whether or not a product name appears, the question is the same: did you choose to go to this place, or were you pushed there by a message?

Reading the web address like a skeptic

Check the part of the address just before the first single slash. Look for swapped letters, an added word such as a hyphenated phrase, a different ending, or the real name sitting at the front of a longer, unrelated address. A seller's name appearing somewhere in the address does not mean the site belongs to that seller.

Browsers can hide parts of an address on small screens, so open the full address before you pay. A padlock icon does not settle the matter, because fake pages can have one too. If you have only seen a seller's name in an ad or message, compare the address with what you find by searching on your own.

• Spelling swaps, such as a letter doubled or replaced by a similar-looking one
• Extra words or hyphens added to a familiar name
• An unusual ending after the dot
• The real name used as a prefix of a longer unrelated address

Habits that keep you out of the trap

Reach the seller yourself. Type the address you intend to use, or use a bookmark you made earlier, and ignore links in messages about orders or payments. If a message worries you, open the shop directly and look for the same notice in your account rather than answering the message.

Never share a password, a verification code, or a full card number in a reply, chat or phone call that you did not start. Real sellers do not need your verification code to ship a bottle. Use a card or payment method that lets you dispute a charge, and keep a note of exactly which address you paid on.

What to do if you already entered details

Act quickly and calmly. Contact your card issuer or payment provider using the number on the card or in its own app, not one from the suspicious page. Ask them to flag or replace the card and to review recent charges. If you reused a password, change it everywhere you used it.

Save screenshots of the page, the address and any messages. Report the page to the platform where you found it. This is also a good moment to remember that spotting a fake page says nothing about your health: if you ever wondered whether a supplement suits you, a dentist or doctor is the right person to ask, and not a stranger who contacted you first.

Questions readers ask