Don't let fake election websites fool you before 2026 midterms

You spot a run garment online that makes you laugh. The tract carries the candidate's name. It besides has polished merchandise photos and a acquainted checkout page. So, you presume the store supports the campaign.

A fake predetermination website tin transcript capable run cues to marque that presumption consciousness reasonable. Your wealth and idiosyncratic accusation could past scope an relation with nary verified run connection.

New probe provided to CyberGuy by WhoisXML API, an net quality institution that analyzes domain, IP and DNS data, tracked 62,081 election-named domains created since September 2025. Researchers identified 13,645 addresses that work similar run sites based connected their names.

The probe classifies lone a information of the domains arsenic campaign-style addresses. Legitimate campaigns, supporters, merchants and domain investors whitethorn power galore of them. However, researchers besides recovered unrecorded storefronts that utilized candidates' names portion selling merchandise and accepting donation-style payments. That smaller radical creates the clearest hazard for you.

FAKE PASSWORD-MANAGER ALERTS COULD PUT YOUR VAULT AT RISK

Voters should verify run websites, donation links and committee disclaimers earlier entering idiosyncratic oregon outgo information. (Getty Images)

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our escaped CyberGuy Live class, "Sick of Spam?," has ended, but you tin inactive ticker the afloat replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you measurement by measurement done elemental ways to trim robocalls, spam texts, junk email and unwanted messages. You’ll besides larn however to curb governmental texts, cleanable up your inbox and spot messages that could enactment your idiosyncratic accusation astatine risk.

Get the free replay and checklist now astatine CyberGuyLive.com.

Why fake predetermination websites surge earlier the midterms

National elections make a unreserved for online existent estate. Campaign teams privation memorable web addresses earlier idiosyncratic other claims them. Supporters whitethorn motorboat instrumentality pages, portion merchants spot an accidental to merchantability governmental products. Impersonators tin travel the aforesaid naming formula.

According to WhoisXML API, astir 46% of the curated campaign-style acceptable utilized structures specified arsenic "[name]for[office]" oregon "for[state]." Domains referencing legislature races appeared astir often. Senate-themed names came next. State names besides appeared crossed astir one-third of the curated set. Texas led with 537 registrations. Florida, Georgia, Ohio and Colorado followed.

Those names consciousness acquainted due to the fact that existent campaigns usage the aforesaid structure. As a result, a questionable domain tin look credible earlier you unfastened the page. Across the domains studied, researchers said 90% hid the registrant's identity. In addition, 88% carried a one-year registration term. Privacy extortion and abbreviated registration presumption tin person morganatic uses. Still, those details merit much attraction erstwhile a caller tract besides copies run branding oregon asks for money.

How fake predetermination websites transcript existent run stores

A tiny alteration successful a domain tin fell successful plain sight. WhoisXML API highlighted massiemoneybomb[.]us, which intimately resembled the established massiemoneybomb[.]com fundraising address. The main quality appeared aft the last dot.

That alteration whitethorn look evident connected a ample machine screen. However, it becomes easier to miss connected a phone, particularly erstwhile a substance oregon societal media station opens the leafage directly. Researchers besides examined kenpaxton[.]us. They said the domain was 58 days aged erstwhile captured, portion kenpaxton[.]com dated backmost to 2008.

The newer tract reportedly sold supportive run products alongside merchandise criticizing the aforesaid candidate. That antithetic premix offers a hint that the store whitethorn deficiency an authoritative connection. Yet galore shoppers volition absorption connected the merchandise photos oregon the price. A polished checkout tin marque the full cognition consciousness established. Alexandre François, the WhoisXML API domain scam researcher down the study, told CyberGuy that AI tin assistance operators physique convincing websites rapidly and astatine scale. That makes it adjacent harder to justice a run leafage by its quality alone.

How fake predetermination donation pages cod idiosyncratic data

Political merchandise whitethorn outgo you much than the terms connected the screen. According to the research, immoderate storefronts allowed visitors to adhd donation-style payments of up to $1,000 to a buying cart. The sites past processed the outgo done their ain checkout flows.

One store reportedly continued accepting a donation-style outgo aft the candidate's authoritative ActBlue leafage stopped taking contributions. The checkout requested a afloat name, thoroughfare address, email code and telephone number. It besides collected outgo paper details.

A acquainted outgo processor tin marque that signifier consciousness safe. However, its beingness lone shows however the outgo moves done the checkout. It cannot corroborate that the campaigner authorized the store oregon that the run receives the money.

François said the survey recovered nary nonstop grounds that donors mislaid wealth oregon had their information misused. "Only the outgo platforms could spot whether a donor mislaid wealth oregon had information misused, and their information was not portion of this study," helium told CyberGuy. The findings enactment caution alternatively than a assertion that each highlighted tract committed fraud.

What domain records uncover astir fake predetermination websites

Domain registration records tin exposure utile clues earlier oregon aft a website launches. Researchers tin reappraisal the instauration date, registrar, paid registration play and privateness status. Sometimes, the records besides place the proprietor oregon registrant country. However, each hint has limits.

Many morganatic website owners usage privateness services to support location addresses and interaction details retired of nationalist databases. Campaigns whitethorn besides registry respective antiaircraft domains truthful impersonators cannot assertion them first. A one-year registration word besides appears crossed mean websites. Price and convenience often thrust that choice.

The hazard grows erstwhile respective details constituent successful the aforesaid direction. A astir copied domain whitethorn pb to a caller storefront with an unofficial donation flow. A mismatched disclaimer adds different concern.

For national governmental committees, nationalist websites mostly request a disclaimer that identifies who paid for the communication. The wording whitethorn besides authorities whether a campaigner authorized it. The FEC explains that disclaimer requirements screen governmental committee websites and online fundraising communications. A disclaimer cannot warrant honesty. Still, a missing oregon mismatched connection gives you a beardown crushed to permission the leafage and verify the tract elsewhere.

Campaigns besides look limits erstwhile trying to unafraid each imaginable saltation of a candidate's name. François said they should consistently beforehand 1 authoritative domain and 1 donation link. He added that "the realistic enactment is monitoring" due to the fact that registering each imaginable look-alike domain would beryllium impractical. Monitoring caller registrations tin assistance campaigns find look-alike sites during their archetypal days online. Campaigns tin past study suspicious pages to the registrar, hosting institution oregon outgo provider.

SAME-NAME CANDIDATE DISQUALIFIED FROM KEY SENATE RACE OVER ALLEGED DEM SCHEME TO CONFUSE VOTERS

Fake predetermination websites, similar the 1 pictured, tin transcript run branding, storefront designs and donation pages to cod wealth and idiosyncratic information. (WhoisXML API)

Ways to enactment harmless from fake predetermination websites

Before you bargain run merchandise oregon marque a governmental publication online, usage these checks to corroborate that the tract connects to the campaigner oregon committee you mean to support.

1) Find the run done a trusted source

Avoid starting with a nexus from an unexpected text, email, online advertisement oregon societal media comment. Instead, hunt for the campaigner independently. Then comparison the effect with links from the candidate's verified societal media relationship oregon established nationalist profile. "No azygous motion is enough, truthful it's champion to cheque a fewer unneurotic and to scope the leafage from the campaign's ain channel," François told CyberGuy.

You tin besides usage a idiosyncratic information removal work to trim the idiosyncratic accusation disposable done information brokers and people-search sites. This whitethorn bounds the details scammers tin usage to marque unexpected messages, targeted ads oregon societal media comments consciousness much convincing. Check retired my apical picks for information removal services and get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web by visiting CyberGuy.com.

For national races, usage the FEC's run concern database astatine fec.gov/data/ to look up candidates and registered committees. The database shows national campaigner and committee filings. For authorities oregon section races, cheque the due authorities oregon section predetermination authority. Many campaigns process contributions done ActBlue oregon WinRed. In those cases, the outgo code should amusement secure.actblue.com oregon secure.winred.com. Some campaigns usage different processors, truthful an unfamiliar outgo supplier unsocial does not beryllium the leafage is deceptive.

2) Read the afloat web address

Tap oregon click the code barroom earlier entering outgo information. Check the spelling and domain ending. Then look for added words oregon letters that imitate the campaign's existent address.

A scammer whitethorn regenerate ".com" with ".us." Another relation whitethorn adhd words specified arsenic "official," "store," "donate," oregon "support" to marque the code consciousness authentic. François said the quality whitethorn besides impact 1 word, a hyphen oregon an ending specified arsenic ".vote" oregon ".store."

3) Look for the run disclaimer

Scroll to the bottommost of the tract and reappraisal the country astir the donation form. A national governmental committee website should place who paid for the communication. Depending connected the committee, the disclaimer whitethorn besides explicate whether the campaigner authorized it.

Compare that committee sanction with the FEC database. Leave the leafage erstwhile the names struggle oregon the disclosure looks vague. Keep successful caput that a deceptive leafage tin transcript a existent committee's name. Treat the disclosure arsenic 1 hint alternatively than impervious that the leafage belongs to the campaign.

4) Compare the store with the authoritative run site

Open the candidate's established website successful a abstracted tab. Look for a nonstop nexus to the merchandise store oregon donation page. If the authoritative tract sends you determination else, usage the nexus it provides.

Also reappraisal the store's interaction details and instrumentality policy. Be cautious if it sells products supporting a campaigner alongside merchandise attacking that candidate. That antithetic premix whitethorn awesome the store has nary authoritative run connection. A leafage that keeps collecting contributions aft a campaigner withdraws besides deserves person scrutiny. The aforesaid applies erstwhile a store continues selling run merchandise aft the authoritative donation leafage closes.

5) Understand what the browser padlock means

The padlock successful your browser means the tract uses an encrypted connection. It offers nary impervious astir the idiosyncratic oregon concern down the page.

CISA warns that phishing attacks whitethorn usage malicious websites that impersonate trusted organizations to cod idiosyncratic information. A nonrecreational plan and unafraid transportation inactive necessitate you to verify the operator.

6) Slow down erstwhile the leafage creates urgency

Pressure tin propulsion you past evident informing signs. Be cautious erstwhile a tract claims a donation lucifer volition vanish wrong minutes. A countdown timepiece that keeps resetting should besides rise concern.

The FTC's broader donation-safety guidance recommends researching an enactment and resisting unit to springiness immediately.

WHAT A SCAMMER SEES THE MOMENT THEY GOOGLE YOUR NAME

Researchers recovered campaign-style websites selling governmental merchandise and accepting donation-style payments nether candidates’ names. (yasindmrblk/Getty Images)

7) Pay with a recognition paper erstwhile possible

A recognition paper mostly offers stronger quality protections than a debit card. It besides keeps the outgo distant from funds successful your checking account. The FTC says ineligible protections for recognition cards transcend those for debit cards successful billing disputes.

Save your receipt and instrumentality screenshots of the merchandise leafage and checkout. Make definite the afloat domain appears successful astatine slightest 1 image. After you pay, cheque your connection to corroborate the magnitude and marque definite the tract did not enroll you successful recurring contributions.

8) Use beardown antivirus software

A fake run website whitethorn effort to propulsion a malicious download oregon nonstop you to different harmful page. Strong antivirus bundle tin assistance observe suspicious files and artifact immoderate unsafe websites. However, you inactive request to verify the run transportation earlier you pay. Get my picks for the champion 2026 antivirus extortion winners for your Windows, Mac, Android and iOS devices astatine CyberGuy.com.

9) Never reuse a password connected a run store

If a store asks you to make an account, usage a unsocial password. A password manager tin make and prevention a beardown password for you, truthful you bash not person to retrieve it. Reusing a password could enactment your different accounts astatine hazard if the login accusation gets exposed. Turn connected two-factor authentication (2FA) erstwhile the tract offers it.

What to bash aft paying done a fake predetermination website

• Contact your paper issuer oregon slope arsenic soon arsenic you fishy a problem.
• Explain what happened and inquire whether it tin reverse the transaction. The FTC advises consumers who paid a suspected scammer by recognition oregon debit paper to interaction the issuer and petition a reversal.
• Next, study suspected fraud done the FTC's ReportFraud system. If the tract whitethorn person violated national run concern law, you tin besides reappraisal the FEC ailment process.
• The FEC accepts complaints astir imaginable violations involving national predetermination financing. Its authorization covers elections for the U.S. House, Senate and president.
• Watch your statements for unfamiliar charges. Also alteration immoderate password that you reused connected the store.
• If the website collected accusation that aboriginal appears successful individuality fraud, IdentityTheft.gov tin make a betterment program and usher you done the adjacent steps.

Kurt's cardinal takeaways connected fake predetermination websites

Election play gives questionable websites a almighty disguise. A candidate's sanction tin make spot earlier you verify who operates the page. The standard of this probe should marque each online donor dilatory down. Researchers recovered much than 62,000 election-named domains, though galore whitethorn service morganatic purposes. The clearest interest comes from progressive storefronts that transcript campaign-style branding and cod wealth extracurricular a verified run path. Take an other infinitesimal earlier buying a garment oregon making a contribution. Find the authoritative run tract done a trusted source. Then corroborate the web code and committee disclosure earlier you participate idiosyncratic oregon outgo information.

Have you ever landed connected a run website that looked existent but near you wondering who was down it? Write to america astatine CyberGuy.com and archer america what raised your suspicions.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, sojourn CyberGuy.com – trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join.

Copyright 2026 CyberGuy.com. All rights reserved.