Identifying Legitimate Websites and Social Media Accounts

There’s a 30 percent likelihood that this article may not be genuine.

I assure you that I am a legitimate reporter. The sources I cite are real, and you can place your trust in my reporting.

But can you really trust me?

Recent research by Pew Research reveals that approximately one-third of new online content is generated by AI. Currently, around 10 percent of “.com” websites have been influenced by AI technology. Misinformation and propaganda sources, often labeled as “pink slime,” have consistently outnumbered genuine news outlets and are continuing to proliferate, aided by AI advancements.

Even reputable websites and social media platforms may lead you towards misinformation, scams, and other online threats. Platforms designed to captivate users with endless feeds driven by engagement are breeding grounds for bots, phishing attempts, and disinformation campaigns. Social media “experts” — some of whom are entirely AI-generated, while others are real individuals with hidden agendas — are amassing followings in the millions. Amidst this complex landscape, it’s crucial to discern the truth.

What is Driving the Rise of Fake Information Sources?

As Donnie Hasseltine, Chief Information Security Officer at Arkstone Defense, notes, “High-quality misinformation and deception were once primarily the domain of nation-states and well-funded organizations.” Today, anyone can create a fake website, deploy a bot, or amplify misleading claims instantly.

Alongside a reduction in platform moderation, the accessibility of advanced AI models, particularly from open-source markets, has revolutionized information dissemination, according to Zohaib Ahmed, CEO of the deepfake detection company Resemble.AI.

Described by Ahmed as akin to the “Wild West,” bad actors now have access to a variety of AI models and tools lacking inherent safeguards to verify authenticity. They can circumvent automatic detection systems integrated into mainstream models like Claude or ChatGPT by uploading vast amounts of user and site data to create sophisticated forgeries without triggering alarms for developers.

This technology has fueled a booming market for low-cost “scam kits.” These kits cover “everything from advertising to crafting blog posts and social media content, to how product features are developed, how video calls are conducted, and how images are uploaded to social media platforms,” Ahmed elaborated. With just a few hundred dollars, scammers can replicate entire websites, create convincing login portals, and generate authentic-looking engagement to enhance credibility.

The issue extends beyond pink slime. You might encounter “URL hijackers” or “typosquatting,” where webpages closely imitate reputable site URLs — including news sites like “abcnews.com.co” or well-known organizations like FIFA — banking on users not scrutinizing closely. Others may impersonate sites where financial transactions or betting occur. These domains can hijack your personal information or outright steal your money.

This also occurs on social media platforms and in chatrooms: X accounts designed to resemble real individuals, dubious TikTok Shop links that redirect users off-site, and questionable links shared in gaming chats by players you assumed were friends.

What Makes Traditional Verification Methods Ineffective, and How Can You Adapt?

“The traditional indicators of authenticity are diminishing,” stated Eyal Elazar, head of market intelligence for e-commerce security firm Riskified. “Just a few years ago, validating online content relied on recognizable visual or contextual cues: a strangely spelled URL, pixelated image artifacts, an unnatural cadence in videos, or the sheer logistical effort required to orchestrate a coordinated hoax. Today, AI can easily correct misspelled URLs, blurry images, and robotic-sounding voices.”

As users navigate a landscape filled with AI-driven websites and bot accounts, they require fresh strategies for sorting through the noise.

How Can You Verify the Authenticity of URLs and Profile Names?

Using the original method to ensure you are on a legitimate site remains effective and straightforward: Check the URL.

First, look for the padlock icon or another indicator confirming that your connection is secure. For Google Chrome users, click the menu icon to the left of the URL. You should see “Connection is secure.”

Second, ensure that the URL starts with “https://” rather than “http://.” The “s” indicates that the site has been authenticated.

These security components remain crucial aspects of the internet, as explained by Ron Kerbs, CEO of the AI fraud prevention company Kidas.

Third, verify the URL’s spelling, advises Ahmed. Watch for symbols replacing letters and non-English characters posing as the English alphabet. Hover over a URL to view the full text.

If uncertainties linger, search the URL on Google. You can cross-check URLs on Google’s site status page or utilize an online URL scanning tool, Ahmed suggests.

Many popular browsers now feature built-in safety checks that alert users when a website fails to meet these security standards. Pay heed to these alerts, and only proceed to visit a site if you are aware of its background.

Keep in mind that social media accounts do not adhere to these standards, experts caution.

To confirm an account’s legitimacy, start with the platform’s verification features, such as the classic checkmark. Always click through to the profile itself, rather than relying solely on how it appears in your feed. Many platforms permit custom characters in display names, allowing users to create fake verified checkmarks at first glance. Some platforms, like X, allow users to purchase verification, so utilize additional methods to confirm those accounts.

Stay vigilant for AI-generated influencer content as well. Look for AI content labels in captions, comments, and profile descriptions. Use the tips below to determine if they have evaded detection (many do).

Credit: Cole Kan/Mashable/Getty

How Can You Apply the SIFT Method to Verify Information?

A website or account may appear authentic at first glance, but its content could be deceptive. Basic security precautions alone cannot prevent misinformation or manipulative content from infiltrating verified platforms, experts warn.

As Kerbs aptly put it, “You may close the door, but someone can still enter through the window.” Users should employ multiple layers and additional strategies beyond URL checks to validate the authenticity of the content they encounter.

One established method for evaluating news sources is the SIFT method. This widely recognized media literacy skill, developed by misinformation researcher Mike Caufield, stands for:

• Stop scrolling through content.

• Investigate the source of the information.

• Find other reports on the topic.

• Trace back to the original source.

What is the Zoning Method and How Does it Work?

Other organizations focused on news literacy, such as the News Literacy Project, advocate for a “zoning” strategy, which involves categorizing content, including websites and social media accounts, based on their purpose.

Chuck Salter, president and CEO of the News Literacy Project, advises, “Identify the type of information you are examining and ascertain its purpose. Is it news intended to inform you? An opinion meant to persuade you? Or a paid advertisement encouraging a purchase?” Salter recommends that online users categorize content before forming trust judgments. “Understanding the primary intent is essential.”

Salter also highlights a fact-checking approach known as “lateral reading,” where you verify a source by researching what others are saying about it.

This method can also be applied to fact-check social media accounts. Before sharing, analyze the algorithm. What are others saying about this page?

Techniques like SIFT and zoning offer straightforward, effective means to identify misinformation. users face platforms that actively seek to capture their attention and keep them engaged. Integrated generative AI tools designed to ease user experience can inadvertently diminish critical thinking, especially among younger audiences, as Salter points out, as they often struggle to “zone” content without assistance.

There may be a need to simplify our approach even further.

Practical Tips for Everyday Online Scanning

For starters, never rely on a screenshot, says Roei Sherman, senior director of research at cloud security firm Mitiga. Faked screenshots are a prevalent method for spreading misinformation, leveraging the attention economy: generating enough shares of an eye-catching headline or quote can convince many that it is true, particularly if a generally reliable source is cited.

Another rule to follow: If a post seems designed to provoke anger, it likely serves that purpose. Scammers and propagandists exploit emotional reactions to drive clicks, according to Rubinson. Avoid engaging with such content.

Lastly, if an account prompts you to leave the current platform, proceed with caution. Fake accounts frequently redirect users from moderated platforms to sites with more lenient content guidelines or entirely unregulated areas of the internet. This is why many social media giants, such as TikTok, enforce strict rules against promoting off-platform sites.

Why Should You Rely on Established Fact-Checkers?

If it is wise to verify a claim through multiple sources, it is even more prudent to consult an authority dedicated to fact-checking. Long before the rise of AI, these sites served as nonpartisan resources for political claims. They have since expanded to cover a wide array of topics that go viral.

How Can Browser Extensions Assist in Rapid Fact-Checking?

Some cybersecurity experts recommend utilizing browser extensions that can automatically scan pages for AI-generated content and evaluate their trustworthiness. These tools provide a solid starting point, but, as experts like Marijus Briedis, chief technology officer at NordVPN, caution, they are not infallible.

• Resemble.AI Deepfake Detector: Analyzes images, videos, and audio to determine if AI technology was employed. A free account permits four website scans daily.

• NewsGuard: Assigns trust and reliability ratings to news sites based on nonpartisan standards.

• McAfee Web Advisor: The free version of this cybersecurity tool scans for malicious sites, including hidden adware, spyware, and phishing attempts.

• DuckDuckGo Scam Blocker: This privacy-focused browser includes built-in scam blockers that flag known fraudulent sites, including shopping platforms and counterfeit cryptocurrency exchanges.

Want to receive daily tech and digital culture news directly to your inbox or device? Sign up for Mashable’s Top Stories newsletter or get Mashable push alerts today.

Find the original content here; the images used in this article are sourced from this site. We are not the authors; the images are included solely for informational purposes with proper attribution to their original creators.