Free website trust checker: what makes a site look legitimate
Visitors decide whether to trust a site in seconds, using a handful of signals. Most are trivial to add, and their absence is what makes a real business look like a template.
By Sapun Lamichhane · Arcetis
Trust is decided fast and mostly unconsciously. A visitor arriving on a site they have not used before is running a rough check, and the individual items are unremarkable — it is their collective absence that produces the feeling of something being off.
Which means this is one of the few areas where a short checklist genuinely covers most of the ground.
The signals people actually read
- A real postal address. The single strongest signal, and the one most missing from otherwise legitimate small business sites.
- A phone number that a person answers, and an email address on your own domain rather than a free provider.
- Valid HTTPS with no mixed content. A certificate warning ends the visit outright.
- An about page naming actual people, with photographs of them rather than stock images.
- Privacy, terms, and — if you sell anything — refund and delivery policies that read as though written for your business rather than pasted from a generator.
Why this is not only about conversion
The same signals feed the entity understanding that search engines and AI assistants build about your business. An Organization block with a real address, a consistent name and a working phone number is machine-readable evidence that you exist. Sites without it are harder to represent confidently, and an assistant that cannot confirm who you are tends to say less about you.
Consistency matters as much as presence. The same business name, address and phone number, identical everywhere they appear, is what allows separate mentions to be resolved to one entity. Three variations of your own address across three pages is a genuine problem, and an extremely common one.
What free means here
Our trust checker is free, with no account needed for your first scan. It reports which signals are present and which are missing, and the honest framing is that this is a heuristic rather than a verdict — a checklist for auditing your own site before launch, not a fraud determination about somebody else's.