How to Spot Homoglyph Scams That Make Fake Websites Look Real

A growing form of online fraud is making it increasingly difficult for internet users to distinguish legitimate websites and email addresses from convincing fakes, with scammers using lookalike characters from different alphabets to deceive victims.

Known as a homoglyph attack, the technique involves replacing familiar letters with characters that look almost identical. A fraudulent web address can therefore appear genuine at first glance while directing users to a spoofed website designed to steal passwords, banking details and other personal information.

The technique exploits one of the simplest weaknesses in online security: human attention.

For example, a scammer could replace a Latin letter in a familiar company name with a similar-looking Cyrillic character. To the human eye, the difference may be almost impossible to notice, particularly when the message is viewed quickly or displayed in certain fonts.

Cybersecurity experts say the method is becoming increasingly attractive to criminals because conventional phishing warnings may not always work against it. The link may contain no obvious spelling errors, strange numbers or suspicious-looking additions.

Instead, the deception is built into individual characters.

Security adviser Jake Moore said scammers frequently attempt to imitate major technology companies, including Microsoft, by substituting characters from other writing systems that closely resemble Latin letters.

Homoglyph attacks can also target email addresses. A user may believe they are communicating with a legitimate organisation when the address actually contains a substituted character that directs the message to a fraudulent account.

The danger becomes greater when victims are encouraged to act quickly.

Experts describe homoglyph attacks as largely psychological because criminals often create a sense of urgency, prompting people to click before carefully examining where the link will take them.

A fraudulent website may then ask the victim to enter a username, password or even a one-time authentication code.

The safest approach is to avoid relying on the link supplied in an unsolicited message. Instead, users should independently open the official website by typing its known address into their browser or using a trusted bookmark.

The same caution applies to emails. Rather than clicking an address contained in a suspicious message, users should manually enter the contact address they already know to be genuine.

Keeping browsers and security software updated can provide another layer of protection because modern browsers can identify and block many known malicious websites.

Experts also recommend enabling two-factor or multifactor authentication on important accounts. Although it cannot prevent every type of fraud, it provides an additional security barrier if a password is stolen.

Users who believe their login information has been compromised should change their passwords immediately and contact their bank or other affected institutions where necessary.

The emergence of homoglyph attacks highlights a broader problem in online security: sometimes the most dangerous scam is not the one that looks obviously suspicious, but the one that looks almost exactly like the real thing.

Taking a few extra seconds to independently verify a website or email address can therefore prevent a seemingly harmless click from becoming a serious security breach.