Before entering personal information, downloading a form, calling a public office, or making a payment, use this practical checklist to verify that the website, email, phone number, or document comes from a legitimate government source.
Overview
Government information is often spread across national, state, provincial, county, municipal, and international websites. A search result, social media post, forwarded email, or online advertisement may point you toward a real service, an unofficial intermediary, or a fraudulent copy. The appearance of a page alone is not enough to establish that it is official.
A reliable verification process has two parts: inspect the information you received, then confirm it through an independent official source. This matters most when a message requests a Social Security number or other national identification number, passport details, banking information, a password, a document upload, or an immediate payment.
Use the following sequence whenever the consequences of acting on incorrect information could be serious:
- Identify the exact agency, office, service, or program involved.
- Inspect the web address, sender information, telephone number, and form details.
- Leave the original message or search result and locate the office through a trusted government directory or known official website.
- Compare the independently found contact information with what you received.
- Contact the office using the independently verified channel before sharing sensitive information or paying.
If you are looking for several services at once, a government services checklist by life event can help you identify which office should handle each task. For records requests, first confirm the responsible records custodian using a dedicated public records request guide rather than relying on an unfamiliar form.
Checklist by scenario
Verifying a government website
- Read the full domain carefully. Look for misspellings, extra words, unusual endings, or a domain that places the supposed agency name in the wrong part of the address. A familiar logo or agency name in a page title does not prove ownership.
- Consider the country and level of government. Domain conventions differ by jurisdiction. A government domain ending is useful context where one exists, but it is not a universal test of authenticity.
- Check the secure connection. The address should normally use HTTPS, but the padlock only indicates an encrypted connection. It does not prove that the organization operating the site is a government office.
- Look for an agency identity and contact page. A credible site should explain which office operates it and provide consistent contact information, service descriptions, and links to related official resources.
- Confirm through a separate directory. Start with a known government homepage, an official agency directory, or another independently located government source. Do not treat a link supplied in a suspicious message as independent confirmation.
Verifying an email or text message
- Inspect the complete sender address, not only the display name. Be cautious of look-alike domains, unexpected personal addresses, and reply-to addresses that differ from the sender.
- Be skeptical of urgency, threats, demands for secrecy, unexpected refunds, or instructions to bypass normal procedures.
- Do not open attachments or follow links until the message has been confirmed. Instead, type a known official address into your browser or use a verified phone number.
- Contact the relevant office and ask whether the message is genuine. Use contact information found independently, not the number or link in the message.
- Preserve the original message if you may need to report it. Avoid forwarding it to other people who might click its links.
Verifying a public office phone number
Search results and map listings can contain outdated, incorrect, or unofficial numbers. Confirm the number on the office’s official contact page, a government directory, or a related official publication. Check that the office name, jurisdiction, hours, and service description match your need. If a caller asks for unusual information or payment, end the call and dial the independently verified number yourself. Do not rely on caller ID, since displayed numbers can be manipulated.
Verifying a government form or online application
Start from the agency’s official website rather than downloading a form from a third-party page. Check the form title, revision or publication information when available, instructions, submission address, and privacy notice. Confirm whether the form is intended for your jurisdiction and situation. Before uploading identity documents, verify that the submission page belongs to the same official service and that the browser address is correct. Save a copy of the blank form, completed form, confirmation page, and any receipt for your records.
What to double-check
Some verification details require more than a quick visual scan:
- Jurisdiction: A local office may not process a state or national request, and an agency in one country may not handle a matter governed by another.
- Service ownership: Identify whether the page belongs to the government office itself or merely describes the service. A private company may lawfully provide assistance, but it should not be confused with the issuing authority.
- Payment instructions: Verify the amount, recipient, method, and timing through official instructions. Never assume that a payment request is legitimate because it uses government branding.
- Personal-data requirements: Confirm why each requested field is needed and whether there is an alternative submission method. Avoid sending more information than the official process requires.
- Dates and version information: Forms, office hours, application procedures, and policy instructions can change. Compare the document with the current version on the agency’s website.
- Accessibility and language options: Official services may provide accessibility information, translated guidance, or telephone assistance. Missing support is not proof of fraud, but it is a reason to verify through another channel.
For legal or regulatory questions, use the same method when reviewing policy updates: identify the issuing authority, locate the original publication, and distinguish a summary from the controlling text. Our guide to researching state laws and regulations provides a related workflow.
Common mistakes
- Trusting search position: The first result may be an advertisement, directory, or intermediary rather than the official service.
- Assuming HTTPS proves authenticity: Encryption protects the connection; it does not identify the site operator.
- Using a phone number from an unsolicited message: Verify the number independently before calling or sharing information.
- Confusing a service provider with an agency: A third party may charge for help with a form while the official agency offers its own process. Read the page carefully before paying.
- Ignoring small spelling differences: Fraudulent sites and addresses often imitate legitimate names with subtle changes.
- Relying on an old bookmark: Agencies redesign websites, move forms, and change office contacts. Recheck important links periodically.
- Sending documents in response to pressure: Pause when a message demands immediate action, threatens penalties, or discourages independent verification.
When to revisit
Recheck government website addresses, forms, phone numbers, and submission instructions whenever you begin a new application or records request. Revisit them before seasonal planning cycles, such as travel, school enrollment, tax preparation, elections, benefits renewals, or business filings. Also verify information after an agency announces a website redesign, changes its online tools, updates a form, or moves an office.
When workflows or digital tools change, repeat the independent-confirmation step even if you have used the service before. Save the date you verified the information and retain official confirmation numbers or receipts. If you encounter a suspicious website, email, phone call, or form, do not continue the transaction. Record the details, contact the relevant office through a trusted channel, and follow that office’s instructions for reporting the incident.
Quick final check: Can you name the responsible government office, confirm its web address from an independent source, match the contact details, explain why the requested information is needed, and verify the payment or submission method? If not, pause and verify before proceeding.
