Evaluating the reputation of a website before entering personal or banking information relies on measurable signals. The HTTPS protocol, the age of the domain, or the presence of legal notices are known indicators, but their individual reliability varies significantly. This article compares the actual value of each trust signal and identifies those that best differentiate a legitimate site from a fraudulent one in 2026.
Website Trust Signals: Comparative Discriminatory Value
Not all verification criteria are equal. An HTTPS certificate, for example, has become almost universal: fraudulent sites also have it. In contrast, the absence of compliant legal notices remains a strong marker of illegitimate sites.
| Verified Signal | Verification Time | Discriminatory Value | Main Limitation |
|---|---|---|---|
| HTTPS Certificate | 2 seconds | Low | Available for free, including for fraudulent sites |
| Legal Notices (SIREN, address, publisher) | 1 to 2 minutes | High | Can be copied from a legitimate site |
| Domain Age (WHOIS) | 1 minute | Medium | An old domain may have been recently purchased |
| External Reviews (Trustpilot, forums, Google) | 3 to 5 minutes | Medium to High | Fake reviews generated by AI are increasingly common |
| ScamDoc / ScamAdviser Score | 30 seconds | Medium | Opaque algorithm, possible false positives |
| Presence on DGCCRF Blacklist | 1 minute | High (if listed) | Covers only sites already reported |
| Visual and Editorial Consistency | 2 to 3 minutes | Medium | AI generators produce visually correct sites |
The “discriminatory value” column reflects the ability of the signal, taken in isolation, to distinguish a reliable site from a fraudulent one. No single signal is sufficient to guarantee a site’s reliability. It is the intersection of multiple checks that produces an actionable diagnosis.
To delve deeper into this type of analysis on a specific domain, it is possible to use tarbob.com safely thanks to a dedicated guide that details the reputation criteria applied to this site.
Legal Notices and SIREN Verification: The Most Underutilized Signal
The DGCCRF recommends systematically checking legal notices before any purchase. Every French commercial site is legally required to publish the name of the publisher, a SIREN number, a physical address, and contact details. The complete absence of this information constitutes a major warning signal.
Checking that a SIREN exists is one step, but it is not enough. A valid SIREN copied from a real company is a common technique on fraudulent sites. Therefore, it is necessary to cross-reference the number with the domain name and the displayed address.
Three-Step Cross-Referencing Method
- Search for the SIREN on data.gouv.fr or societe.com to verify that the company exists, that its activity corresponds to the site, and that its address matches
- Compare the physical address displayed in the legal notices with that registered in the commercial register: a divergence without explanation (head office vs warehouse) warrants further verification
- Type the name of the company followed by the term “scam” in a search engine, as recommended by the DGCCRF, to detect any previous reports
This cross-referencing takes less than five minutes. It filters out the majority of sites that simply copy legal information without any real link to a registered commercial structure.
Customer Reviews in 2026: Distinguishing Genuine Feedback from Generated Evaluations
Consumer reviews remain a reputation indicator, but their use requires more caution than before. Fake reviews generated by AI now mimic the style and length of real testimonials, making visual detection more difficult.
Several elements allow for filtering usable reviews. A credible review mentions specific details about the product or service (actual delivery time, specific defect, interaction with customer service). In contrast, generic and uniformly positive reviews published over a short period signal probable manipulation.
Where to Look for Reliable Reviews on a Site
Third-party platforms like Trustpilot or Google offer sorting filters by date and rating. The DGCCRF recommends not relying solely on reviews displayed on the site itself, as the seller controls their publication. Cross-referencing at least two sources of external reviews divides the risk of error.
Specialized forums and discussion threads on social media sometimes provide more detailed reports than review platforms, especially for recent sites that have not yet accumulated enough verified evaluations.
European Directive 2024/825: What Greenwashing Changes for Site Reputation
Starting from September 27, 2026, the directive (EU) 2024/825 on empowering consumers for the ecological transition modifies the criteria for assessing the credibility of a site. Twelve forms of greenwashing become unfair commercial practices.
Specifically, the terms “ecological,” “green,” or “good for the planet” are prohibited without proof of recognized environmental performance. A site displaying a private label without a public specification, without oversight by an independent third party, and without a withdrawal procedure loses its legal credibility.
This regulatory framework provides a new verification criterion. A site that continues to display vague environmental claims after September 2026 violates European regulations. This non-compliance may be an indicator of broader regulatory negligence, including data protection or sales conditions.
- Verify that the displayed environmental labels correspond to an identifiable and independent certifying body
- Ensure that environmental comparisons between products publish their methodology and the list of included products
- Consider the display of self-proclaimed labels as an additional negative signal in the overall site assessment
The combination of these verifications with classic checks (legal notices, reviews, domain age) produces a more comprehensive evaluation grid than a simple technical checklist. The most reliable signal remains the intersection of at least three independent checks covering different dimensions: legal identity, external reputation, and regulatory compliance.