In 2026, the classic signals of a website’s reliability are no longer sufficient. Cybermalveillance.gouv.fr recorded over 504,000 assistance requests in 2025, an increase of about 20% compared to the previous year. Phishing accounts for a third of these requests, with a 71% increase year-on-year. Evaluating a site’s reputation before using it now requires going beyond surface checks to probe less visible layers.
Payment fraud and fake sites: what the 2025-2026 figures reveal
Frauds involving bank transfers and credit cards are taking up an increasing share of reports. Fake sites no longer just copy a logo or design: they replicate complete payment interfaces, with valid HTTPS certificates and realistic confirmation pages.
A padlock in the address bar only certifies the encryption of the connection. It says nothing about the actual identity of the site’s operator. Yet many internet users continue to interpret it as a guarantee of legitimacy.
The most concerning trend relates to automation. Ready-to-use phishing kits allow the creation of a fake e-commerce site in just a few hours, complete with a credible domain name and fabricated reviews. Trying to understand why tarbob doesn’t work illustrates the difficulty in untangling legitimate platforms from copies.
Field reports diverge on the effectiveness of public blacklists. Some databases, like that of the DGCCRF, are updated regularly, but a fraudulent site can exist for several weeks before being listed. The time lag between the appearance of a fake site and its reporting remains a blind spot.
Digital Services Act and online reviews: the regulatory framework in force
Since February 17, 2024, the Digital Services Act (Regulation (EU) 2022/2065) applies to any intermediary service provider active in France. This regulation imposes specific obligations on platforms that publish consumer reviews.
The sites concerned must ensure the traceability of reviews and clearly inform the user about the moderation methods employed. The publication of fake positive reviews, whether written internally or purchased, is now subject to administrative sanctions.
For the internet user evaluating a site’s reputation, this framework changes the interpretation of customer reviews. A site that displays no information about its review moderation policy potentially violates the DSA. The absence of this mention is a more reliable warning signal than the content of the reviews themselves.
- Check if the site indicates how reviews are collected and moderated (DSA obligation).
- Look for the presence of a mechanism for reporting illegal content accessible from each review page.
- Cross-check the site’s reviews with independent third-party platforms to detect inconsistencies in ratings.
The available data does not yet allow for measuring the actual effect of the DSA on the proportion of fake reviews in circulation. Initial sanctions are starting to be imposed, but the volume of affected platforms makes comprehensive control difficult.
Domain name analysis and age: the checks that really matter
The URL remains the first verifiable element. A domain name filled with hyphens, random numbers, or containing a misspelling of a well-known brand name almost always signals a copy. In contrast, a clean and old domain does not guarantee reliability: expired domain names are regularly repurchased to exploit their history.
WHOIS tools allow you to check the creation date of a domain. An e-commerce site created less than three months ago, offering luxury products at rock-bottom prices, accumulates two risk signals. Age alone is not enough, but when combined with other indicators, it guides the analysis.
Legal notices and company identity
Any commercial site operating in France must publish complete legal notices: publisher’s name, SIREN number, physical address, contact details. The total absence of legal notices remains the most discriminating warning signal.
When the notices exist, cross-checking takes less than a minute. The SIREN number can be verified on the INSEE’s Sirene directory. A physical address can be checked via a map search. If the address points to a vacant lot or a residential building unrelated to the declared activity, caution is advised.
Online reputation: beyond stars and ratings
Average ratings (4.8/5 with hundreds of glowing reviews published in just a few days) have become a marker of manipulation rather than quality. The dispersion of reviews over time matters more than the overall rating.
Searching for the site’s name associated with the term “scam” on a search engine remains a simple method recommended by the DGCCRF. This search brings up negative testimonials, reports on forums, and potential press articles.
- Type the site’s name + “scam” or “reviews” into a search engine.
- Check the site’s social media: regular activity with real interactions (not just promotional posts) is a positive indicator.
- Verify if the site appears in the Signal Conso reporting database or on the AMF blacklist for financial sites.
Presence on social media proves nothing in itself. Recent accounts with few followers and generic comments can be fabricated just as easily as a fake site. It is the consistency between the domain’s age, the quality of the legal notices, the review policy, and social activity that allows for a well-founded opinion.
No single criterion resolves the question of a site’s reliability in 2026. The combination of several checks, each taking just a few seconds, remains the only approach that truly limits risk. The most useful reflex is to doubt by default, especially when an offer seems too good to match the real market.
