Typosquatting: When a Typing Mistake Takes You to a Scam
Typosquatting sites wait for you to mistype a web address. How misspelled domains are used for phishing, fake shops and malware, and simple habits that avoid them.
You type the address of a site you use every day, hit enter, and land on something that looks almost right. You made a small typing mistake, and someone registered that mistake. This is typosquatting.
Common typosquatting patterns
| Pattern | Example (illustrative) |
|---|---|
| Missing letter | exampleban[.]com |
| Double letter | exammplebank[.]com |
| Neighbouring key | examplebsnk[.]com |
| Missing dot | wwwexamplebank[.]com |
| Wrong ending | examplebank[.]cm or [.]co |
What typosquatted sites do
- Copy the real site to steal logins. See fake login pages.
- Show "you've won" pop-ups and fake prizes.
- Sell counterfeit goods.
- Push malicious downloads or notification spam. See browser notification scams.
Habits that protect you
- Bookmark important sites: bank, email, shopping, work tools.
- Use official apps where available.
- Let the browser autocomplete addresses you have visited before.
- Glance at the address bar before entering anything.
- Notice your password manager: if it will not fill in, stop.
For organizations: register common misspellings of your domain and monitor for new lookalikes. See responding to brand impersonation.
Landed somewhere that feels off? Paste the address into CyberWatch AI Scan for a free check.
For more, read our phishing guide.
Frequently asked questions
What is typosquatting?
Registering domain names that are common misspellings of popular sites, to catch people who make typing mistakes.
What happens on a typosquatted site?
It may copy the real site to steal logins, show scam adverts or fake prizes, sell counterfeit goods, or push malware.
How do I avoid it?
Use bookmarks and official apps for important sites, and let your browser autocomplete addresses you have visited before.
Sources
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
- Online Shopping, US Federal Trade Commission
- Report a phishing page, Google Safe Browsing
