How ScamAdviser’s Trust Score Works: The 40+ Signals Behind Every Rating (And Why Your Score Might Surprise You)

Why ScamAdviser Exists: The Founding Story

In 2012, our founder bought a set of golf clubs online. They arrived fake. He tried every avenue to get his money back — and failed. Out of that frustration, ScamAdviser was born: a free tool to help every online shopper make a more informed decision before handing over their money. Today, over 7 million consumers use ScamAdviser every month to check websites before they buy, share personal data, or engage with an unknown platform.

What is the ScamAdviser Trust Score?

The Trust Score is a number between 1 and 100 that represents how likely a website is to be safe and trustworthy. A higher score means more positive signals. A lower score means more warning signs. It is not a verdict — it is a risk indicator based on automated analysis across 40+ independent data sources, updated continuously as new information becomes available.

The score is dynamic: it changes over time as the website’s content, infrastructure, reputation, and user reviews evolve. A site that scores 30 today can score 75 in six months if it establishes a legitimate track record.

The Core Principle

The Trust Score is calculated by weighing positive signals against negative signals. No single factor determines the score. A new domain might lower a score, but a verified SSL certificate, active social media presence, and positive Trustpilot reviews will push it back up. The final score reflects the balance of all available evidence.

Disclaimer: This article was last updated in March 2026 to ensure the information reflects the most current data available at the time of publication.

The 40+ Signals: A Complete Breakdown by Category

While we can’t reveal every detail of our methodology (otherwise scammers would game the system), we can share the major signal categories and what they measure. These are organised into five groups:

Domain & Registration Signals

1. Domain age  —  How long the website has been registered. Very new domains (under 6 months) score lower, as most scam sites disappear quickly.
2. Registration period  —  How far into the future the domain is registered. Legitimate businesses often register for multiple years; scam sites typically register for just 12 months.
3. WHOIS data availability  —  Whether the registrant’s details are publicly available or hidden behind a privacy service.
4. Domain registrar reputation  —  Whether the domain registrar is associated with high volumes of fraudulent registrations.
5. Free email addresses used  —  Whether the site uses Gmail or Yahoo contact addresses rather than a branded domain email.
6. Top-level domain (TLD) risk  —  Certain TLDs (e.g. .xyz, .top, .click) are disproportionately associated with scam activity.

Technical & Server Signals

1. Server & DNS location  —  Where the website’s server is physically hosted. Certain hosting regions are disproportionately associated with scam infrastructure.
2. IP address reputation  —  Whether the server IP is on any blacklists or is shared with known malicious domains.
3. SSL certificate quality  —  Whether the site has a valid SSL certificate, and whether it is a basic (DV) or extended validation (EV) certificate.
4. Presence of malware  —  Whether the site has been flagged for hosting or distributing malicious software.
5. Previous hacking history  —  Whether the domain has been compromised in the past.
6. Registrar blacklist  —  Whether the domain registrar appears on known registrar blacklists.
7. ISP blacklist  —  Whether the Internet Service Provider is associated with hosting fraudulent sites.
8. Other domains on the same server  —  Whether the site shares a server with other low-trust or flagged websites.
9. Website performance & speed  —  Technical quality of the website infrastructure — very low-quality hosting is associated with disposable scam sites.
10. Search engine blocking  —  Whether the site prevents search engines from indexing it — a significant red flag.

Reputation & Review Signals

1. ScamAdviser user reviews  —  Reports and ratings submitted directly by ScamAdviser users who have experience with the site.
2. Trustpilot score & volume  —  Independent review scores from Trustpilot, weighted by volume and recency.
3. SiteJabber reviews  —  Consumer reviews from SiteJabber, an independent consumer review platform.
4. Web of Trust (WOT) ratings  —  Community-sourced safety ratings from the Web of Trust browser extension network.
5. Tranco popularity rank  —  A website’s traffic-based popularity ranking. High-traffic sites typically score better; very low-traffic sites raise questions.
6. Number of backlinks  —  The volume and quality of websites linking to the domain. Legitimate businesses accumulate natural backlinks over time.
7. Association memberships  —  Whether the site is a member of verified industry associations (e.g. ecommerce or consumer protection organisations).
8. Use of trust seals  —  Whether the site displays verified trust seals from recognised certification bodies.

Business & Transparency Signals

1. Contact details availability  —  Whether the site displays a physical address, phone number, and email. Hidden or generic contact details lower the score.
2. Use of generic or PO Box address  —  Whether the business address is a real premises or a generic mail forwarding address.
3. Company registration verification  —  Whether the business can be verified against official company registries.
4. Product category offered  —  Certain product categories (luxury goods at deep discounts, pharmaceutical products, investments) are higher-risk by nature.
5. Payment methods offered  —  Whether the site accepts traceable payment methods (card, PayPal) or exclusively untraceable ones (crypto, wire transfer).
6. Use of internal review system  —  Whether the site relies solely on its own hosted reviews rather than independent third-party platforms.
7. Physical address verification  —  Cross-referencing the claimed address against mapping and business registry data.

Social & Content Signals

1. Active social media presence  —  Whether the site has real, active social media accounts with genuine engagement — not just placeholder pages.
2. Social media account age  —  How long the social media accounts have been active. Newly created accounts alongside a new domain is a compound risk signal.
3. Website content quality  —  Whether the content is original, well-structured, and coherent — or thin, duplicated, or poorly translated.
4. Technology stack used  —  The platform and technologies underlying the website, some of which are disproportionately used by fraudulent operators.
5. External review scores aggregated  —  A weighted composite of all available independent review platform data.

The Trust Score Scale: What Each Band Means — And What To Do

Each score band carries a different level of risk and warrants a different level of consumer response. Here is how to interpret the full scale:

Why Does a Legitimate Website Sometimes Score Low?

This is the most common question we receive — and it deserves a direct, honest answer. Here are the most frequent reasons a genuinely legitimate website may receive a lower Trust Score than expected:

🚨 Important Transparency Note
We acknowledge that false positives exist. Our algorithm is automated and not perfect. If your website has been incorrectly flagged, you can view the specific Positive and Negative Highlights on your Trust Score page. Website owners can claim their profile on ScamAdviser.com and submit evidence for manual review or contact us via report@scamadviser.com for business verification and review requests. We are committed to correcting inaccurate ratings when presented with verifiable evidence.

IMPORTANT WARNING
We do not accept any form of payment to change, improve, or influence Trust Scores. Business verification and review processes are completely free. Any claim or offer suggesting otherwise is fraudulent and should be reported immediately.

The Honest Limitations of the Trust Score

We believe in transparency. Here is what the ScamAdviser Trust Score cannot reliably detect, and why:

Who Uses ScamAdviser’s Trust Score Data?

ScamAdviser’s Trust Score is not just a consumer tool. The same data powers a professional-grade ecosystem used across industries:

How To Improve Your Website’s Trust Score

If you are a website owner with a lower score than expected, these are the most effective steps to improve it — in order of impact:

➀ Claim your ScamAdviser profile at ScamAdviser.com/claim-your-site and add verified business information
➁ Build an independent Trustpilot profile and actively invite genuine customers to leave reviews
➂ Ensure your website displays a real, verifiable physical address and a branded email address (not Gmail)
➃ Add an EV (Extended Validation) SSL certificate rather than a basic DV certificate
➄ Create and actively maintain branded social media accounts (LinkedIn company page is particularly strong)
➅ Register your domain for multiple years rather than the default 12 months
➆ If using WHOIS privacy, offset it with maximum transparency elsewhere on the site (about page, team, company registration number)

Frequently Asked Questions
Why does ScamAdviser give a low score to a legitimate website?
The most common reasons are: the domain was recently registered (under 6–12 months), the website uses WHOIS privacy protection, the site has low traffic volume, the hosting server is shared with other flagged sites, or there are no independent reviews on platforms like Trustpilot. None of these automatically mean the site is a scam — but they are statistically associated with higher-risk sites. Website owners can claim their profile and provide evidence to support a manual review.

Can a scammer fake a high Trust Score?
It is difficult but not impossible to temporarily game certain signals. This is precisely why we use 40+ independent data sources rather than relying on any single factor. A site that invests in appearing legitimate will score better — but it will also typically expose itself through inconsistencies across signals (mismatched address, unverifiable contact details, newly created social accounts). User reports also continuously update scores, which is why reporting suspicious sites matters.

How often is the Trust Score updated?
The Trust Score is dynamic and updates automatically as new data becomes available. This includes new user reviews, changes to the website’s technical infrastructure, new malware or blacklist flags, shifts in social media activity, and changes in domain registration details. Significant changes can shift a score within hours; routine updates happen continuously.

How do I dispute my website’s ScamAdviser Trust Score?
Visit ScamAdviser.com/claim-your-site to claim your business profile. Once claimed, you can view the specific positive and negative highlights driving your score, respond to user reviews, and submit evidence for a manual review by the ScamAdviser team. Legitimate businesses with verifiable evidence of their authenticity can have incorrect ratings corrected.

Does ScamAdviser check social media accounts, phone numbers, and crypto wallets too?
Yes. Beyond website checking, ScamAdviser also analyses phone numbers for scam association, cryptocurrency wallet addresses for fraud history, and IBAN bank account numbers for known fraud links. These checks use the same multi-source signal methodology as the website Trust Score.

Is ScamAdviser a definitive verdict on whether a site is a scam?
No — and we are transparent about this. The Trust Score is a risk indicator, not a verdict. A score of 30 does not mean a site is definitively a scam; it means there are enough warning signals to warrant further investigation before proceeding. We always recommend cross-checking with independent Google searches, Trustpilot, and the BBB before making significant purchases from any unfamiliar site.

Use ScamAdviser as Your First Line of Defence

ScamAdviser checks over 1 million new websites every month. Our mission — born from a founder who was scammed himself — is to make sure every consumer has access to the same level of information about a website that a professional fraud investigator would use. The Trust Score is the starting point. Your own judgement, cross-checked against independent sources, is the finishing line.

If you believe a website’s score is inaccurate — in either direction — please report it or claim it at ScamAdviser.com. Every report makes the tool more accurate for the next 6.5 million people who use it this month.

Adam Collins is a cybersecurity researcher at ScamAdviser who operates under a pseudonym for privacy and security. With over four years on the digital frontlines and 1,500+ days spent deconstructing thousands of fraud schemes, he specializes in translating complex threats into actionable advice. Adam’s mission is simple: exposing red flags so you can navigate the web with confidence.