Scam Detective
Scam verdict · Educational pattern check
Scam Detective research desk · Updated October 2026
Real one is free — .gov

Is This Government Website Legit? The Real One Is Free — and Its Address Ends in .gov

Two checks end it: the address ends in .gov, and no fee appears for a free service. Replacing a Social Security card is free at ssa.gov, USCIS forms are free, vital records come from the county clerk or state health department, and license renewals from the state agency's own portal — never from a search ad. The Social Security Administration names the lookalike model on its fraud page: companies charging for services available free from the agency violate Section 1140 of the Social Security Act.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

Check a URL freeRead the full guide
The record · Quoted verbatim

Straight from the source

The verdict stands on the public record — the line below is quoted verbatim from the source named under it.

“Companies offering our services for a fee, even though the same services are available directly from us free of charge.”

— Social Security Administration, “Fraud Prevention and Reporting,” listing violations of Section 1140 of the Social Security Act.

The durable question

Why this question never goes away

The business model is legal-ish and ancient: rank an official-looking site above the real agency, then charge a “processing fee” for something the government gives away. The Social Security Administration names it on its fraud page — companies selling corrected or replacement Social Security cards, Social Security Statements, or a newborn's SSN, all free from the agency — and notes the darker twin: privately owned websites using misleading domain names to look like the official site and harvest personal information. State agencies keep the same list for their own services. Indiana's Bureau of Motor Vehicles publishes its lookalikes by name — DMV.org, DMV.com, lookalike state domains — and flags “Zertifica, also known as Vital Records,” a site selling birth, marriage, divorce, and death certificates that is “NOT affiliated with the Indiana BMV or any other State agencies in any way.” The defense is two seconds: federal and state sites end in .gov, and a fee for a free service is the whole verdict.

The checklist

Five red flags — any one is enough

A fee for a replacement Social Security card, a Social Security Statement, or a newborn's SSN — all free from SSA; charging is a Section 1140 violation.
The address doesn't end in .gov — a federal or state government site always does; the lookalike can't.
A search ad above the real agency — lookalikes buy the top slot precisely because you were looking for the government.
“Processing” or “expediting” fees for vital records — the county clerk or state health department sells the same document directly.
A form that asks for your SSN, birth data, or license number on a non-.gov site — Indiana's BMV warns these sites may contain malicious content, not just markup.
What to do now

Your next three moves

1
Verify through a channel you open yourself — type the agency's .gov address yourself: replace a Social Security card free at ssa.gov, renew a license at your state agency's own portal (Indiana's is IN.gov/mybmv), and order birth, marriage, divorce, or death certificates from the county clerk or state health department — never through a search ad, which lookalikes buy precisely because you were looking for the government.
2
Refuse the specific ask: no “processing” or “expediting” fee for something the government provides free — a replacement Social Security card, a Social Security Statement, a newborn's SSN — and no SSN, birth data, or license number typed into a form on a non-.gov site; Indiana's BMV warns those sites may contain malicious content, not just markup.
3
Report the lookalike to the SSA's Office of the Inspector General at oig.ssa.gov or 1-800-269-0271 and to the FTC at ReportFraud.ftc.gov — screenshot the site with its URL first, per the SSA's evidence guidance — and check any link via the $2 instant check for a 0–100 scam risk score before you pay.
Instant URL Check · $2, one-time
Holding the actual message? Check the exact link, number, or sender.
Paste it into the instant check — free risk signal in 60 seconds, then the full report for $2: a 0–100 scam risk score, a plain-English verdict, the top 5 red flags found, and a 3-step what-to-do-now list. No subscription.
Run the $2 instant check
Related verdicts

People asking this also asked

Is this TSA PreCheck renewal site legit?Check the URLIs the DMV text about an unpaid traffic ticket real?No — scamThe First Result for “Medicare” Might Be an Ad a Scammer Paid For (2026)Scroll past the ads — check for .govACA Open Enrollment Starts Nov. 1. The Lookalike Sites and Rogue “Agents” Got There First. (2026)Type HealthCare.gov yourself — and no one can switch your plan without you
← Browse all 218 answers
$2, one time
No subscription, no account, nothing to cancel.
Verdict in minutes
Full report on screen and as a PDF, usually within minutes.
Honest verdicts
If it looks safe, we say so — a clear “safe” is worth $2 too.
Got a link of your own?

Sixty seconds of checking beats a four-figure mistake.

Paste any URL for a free instant preview — the full 0–100 report is $2, one-time. No subscription.

Check a URL free
Spot the scam before it spots you.
For businesses · $19, one-time
Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $19
Free brand scan first — you only pay for the full audit.