---
title: "Fake sign-in pages: how to spot one | URLert"
description: "A page that looks like your bank's, your email's or a shared document's sign-in, on another website. How to tell, and how to sign in without the risk."
url: https://www.urlert.com/scams/fake-sign-in-pages
mcp: https://www.urlert.com/mcp
---

[URLert home](https://www.urlert.com/index.md)

[About (opens in a new tab)](https://www.urlert.com/about.md) [Sign in](https://www.urlert.com/login.md)

[All scam guides](https://www.urlert.com/scams.md)

# Fake sign‑in pages

A page that looks like your bank's, your email's or a shared document's sign-in, on another website. How to tell, and how to sign in without the risk.

An email

From to me

Microsoft 365: Your mailbox is almost full. Sign in to keep receiving email: https://m1crosoft-365-verify.example

On this page

1. What it looks like
2. How to spot one
3. What to do
4. Already acted?
5. Similar scams

## What it looks like

An email

From to me

Microsoft 365: Your mailbox is almost full. Sign in to keep receiving email: https://m1crosoft-365-verify.example

An email

From to me

Sarah shared “Q3 invoice.pdf” with you. Open: https://docs-share-view.example/file/883

(then a page that asks for your email password)

A message on a social app

Meta: Your page broke our rules and will be removed in 24 hours. Appeal here: https://meta-appeal-review.example

Examples. The names and amounts change; the shape doesn't.

## How to spot one

1. **A sign-in from a link in a message.** That's the whole trick: the page can look exactly like the real one.
2. **The address isn't the company's.** A letter swapped for a number (m1crosoft), extra words, a strange ending. On a phone, tap the address bar to see all of it. The padlock only means the connection is private, not that the site is real.
3. **A shared file you weren't expecting** that wants your password to open, or a form or survey on a well-known site that asks for one.
4. **It asks for more than a sign-in usually does:** your card, your full date of birth, the code you're sent.
5. **Your password manager doesn't fill it in.** It knows the real website, and this isn't it.

## What to do

1. **Sign in from the app, not from a link.** Fake sign-in pages can look just like real ones. Open the app, use a bookmark, or type the website's address yourself. Not from a search ad: the top result can be a fake.
2. **Never type a password or card number into a form from a message.**
3. **Still not sure?** [Check the message](https://www.urlert.com/index.md). We open its link on a phone and a computer, not yours, and tell you what it is.
4. **Then delete it.** You can report it to your police or your country's fraud reporting service. Your phone may also let you report it as junk or spam. In the US and UK, you can also forward a scam text to 7726.

   [In the US: ReportFraud.ftc.gov (the FTC's website, opens in a new tab)](https://reportfraud.ftc.gov/)

### Already signed in, or typed your card?

- [I gave a password or a code](https://www.urlert.com/recover/password.md)
- [I gave my card details](https://www.urlert.com/recover/card.md)

## Similar scams

- [Codes and sign-in requests](https://www.urlert.com/scams/codes-and-sign-in-requests.md)
- [QR codes](https://www.urlert.com/scams/qr-codes.md)
- [How scams pretend](https://www.urlert.com/scams/how-scams-pretend.md)

On this page

1. What it looks like
2. How to spot one
3. What to do
4. Already acted?
5. Similar scams

[URLert home](https://www.urlert.com/index.md)

[About(opens in a new tab)](https://www.urlert.com/about.md) · [How we decide](https://www.urlert.com/how.md) · [Privacy](https://www.urlert.com/privacy.md) · [Terms](https://www.urlert.com/terms.md) · [For developers](https://www.urlert.com/developers.md) · [AI assistants](https://www.urlert.com/assistants.md)