Searching for a company’s payment page sounds simple: type the biller’s name into Google or Bing, click the first result, and pay.
That shortcut can be risky.
The Federal Trade Commission (FTC) warned consumers in August 2026 that paid search ads can lead people to third-party payment sites that look like the official payment channel for a utility, medical provider, lender, toll authority, or other biller.
The warning followed an FTC case involving Doxo. The FTC announced a $2.1 million settlement over allegations that the company used misleading search ads to impersonate billers and charged consumers add-on fees. The case is useful as a broader consumer lesson: the first search result is not automatically the company you owe money to.
Not every third-party payment service is fraudulent. The problem is when a service looks official, hides or obscures its third-party role, adds unexpected fees, or makes it difficult for consumers to understand who is actually receiving and forwarding the payment.
Here is a safer way to pay bills online.
Quick answer: how do you verify the real bill payment site?
Use information you already received from the biller whenever possible.
Start with the website printed on your statement, invoice, insurance card, utility notice, loan documents, or official account email. If you know the company’s web address, type it directly into your browser instead of searching for it.
If you must search, slow down before clicking the top result. Look for an “Ad” or “Sponsored” label, check the domain name, and confirm that the page clearly belongs to the organization you intend to pay.
A familiar logo or company name on a landing page is not enough by itself.
Why paid search results can be confusing
Search engines often place advertisements above unpaid search results.
An advertiser can bid on searches related to another company’s name or a type of bill payment. That means a result appearing at the top of the page might be a third-party service rather than the official biller.
According to the FTC’s Doxo case, some search ads and landing pages allegedly made consumers believe they were paying billers directly even when the payment was going through a separate company.
The FTC says consumers should scroll past paid results when trying to locate the real payment site or use the biller’s known web address directly.
A five-step verification check before you pay
1. Start with the bill itself
Look at the paper statement, PDF invoice, official email, or account document you already received.
Find the web address, phone number, or payment instructions printed by the biller.
This is usually safer than starting with a search engine because you are using information that came from an existing customer relationship.
2. Check the domain, not just the page design
Scam pages and third-party services can copy logos, colors, company names, and other branding cues.
Look at the actual domain in the browser address bar.
- Does the domain match the company’s known website?
- Is the company name spelled correctly?
- Is the domain a completely different business name?
- Did the page redirect you through another site before reaching the payment form?
A padlock or HTTPS connection only tells you the connection is encrypted. It does not prove that the site is the official biller.
3. Find out whether you are paying a third party
Before entering payment information, look for language explaining who operates the site.
A legitimate third-party payment service should make its role clear. It should not require you to infer from fine print that the biller itself does not operate the page.
Check the footer, terms, payment confirmation language, and fee disclosures.
If the page says it will “deliver” or “forward” your payment rather than crediting the biller directly, understand the timing before continuing.
4. Review fees and payment timing
A payment site may charge a convenience, processing, delivery, or other fee.
Do not assume a fee is required by the company you owe.
Compare the total amount on the payment screen with the amount of your bill. Check when the biller is expected to receive the payment, especially if a due date is close.
An unexpected fee or multi-day delivery estimate is a reason to stop and verify whether a direct payment option exists.
5. Verify through a second channel when anything feels off
Use a phone number from your bill, official app, account statement, or the company’s known website.
Ask whether the payment site you found is an authorized channel.
Do not use a phone number shown only on the questionable payment page, because that keeps you inside the same unverified system.
Common bills where this mistake can happen
The FTC’s case described payment searches involving utilities, car loans, medical bills, and state toll authorities.
The same verification habit is useful for many payments, including:
- Electricity and water bills
- Internet and phone bills
- Medical bills and lab invoices
- Auto loans and mortgages
- Insurance premiums
- Toll bills and parking-related payments
- Taxes and government fees
- Tuition and school payments
The more urgent the bill feels, the easier it is to click quickly. That is exactly when verification matters most.
Paid ad does not automatically mean scam
It is important not to overcorrect.
A paid search ad can come from the real company. A third-party processor can also be legitimate and authorized.
The warning sign is not simply “this is an ad.” The question is whether the result clearly identifies who is operating the payment service and whether you can independently verify that relationship.
That distinction matters because consumer protection should be based on evidence, not on assuming every intermediary is fraudulent.
What should you do if you already paid through the wrong site?
First, save everything.
Keep screenshots, confirmation emails, transaction numbers, receipts, the web address, and any fee disclosure you saw.
Then contact the actual biller using a verified phone number or official account portal.
Ask:
- Did the biller receive the payment?
- Was the payment sent through an authorized service?
- How long will posting take?
- Is the account still considered unpaid or late?
Next, review the transaction with your bank, card issuer, or payment provider.
If the charge was unauthorized, duplicated, or materially different from what you agreed to, ask what dispute options are available. Do not falsely describe an authorized payment as fraud simply because you later regretted a fee; give the financial institution accurate information about what happened.
If you believe the site misrepresented itself or used deceptive practices, you can report the experience to the FTC at ReportFraud.ftc.gov.
What if the payment reached the real biller but a fee was added?
A fee does not automatically mean the transaction was a scam.
Review the disclosures you saw before paying and compare them with your confirmation. If the service did not clearly disclose the fee or misrepresented its relationship with the biller, preserve the evidence and consider reporting the issue.
Also check whether the biller offers a direct no-fee or lower-fee payment method for future payments.
How this scam pattern relates to fake websites
Bill pay impersonation uses a familiar trust shortcut: you search for a known company, see its name or logo, and assume the page must be official.
Fake dealership websites use a similar tactic. Scammers can copy a real dealer’s name, inventory photos, or branding and then pressure buyers into sending deposits to the wrong party.
Our fake car dealership guide explains how to verify the seller, vehicle, and payment destination before sending money.
The same principle also applies to QR-code payments. A QR code can send you to a page that looks legitimate even when the code itself was placed by a scammer. Our parking QR code guide explains how to verify the payment destination before entering card details.
A simple rule for online bill payment
Do not verify a payment page using information from that same payment page.
Use an independent source — your bill, official app, saved account portal, known company website, or verified customer-service number.
That one habit breaks many impersonation scams because it forces the payment destination to match information you already trust.
Frequently asked questions
Is the first Google result always the official biller?
No. Paid advertisements can appear above unpaid search results, and the top result may be a third-party service.
Are all third-party bill payment sites scams?
No. Some are legitimate. The key is whether the service clearly identifies itself, discloses fees and timing, and can be independently verified as authorized or appropriate for your payment.
Does HTTPS prove a payment site is legitimate?
No. HTTPS protects the connection between your device and the website. Scam and deceptive sites can also use HTTPS.
What is the safest way to find a payment page?
Use the web address printed on your bill or statement, an official app you already use, or a bookmark you previously verified. If you search, verify the domain before entering payment information.
What should I do if I paid the wrong site?
Save the evidence, contact the actual biller, check whether the payment was received, review the transaction with your financial institution, and report deceptive conduct to the FTC when appropriate.
Bottom line
Online bill payment scams and misleading intermediaries work because consumers are trying to complete a routine task quickly.
The safest approach is to treat the payment destination as something you must verify independently. Start with the bill or official account information, confirm the domain, understand whether a third party is involved, read the fees, and verify through another channel if anything looks unusual.
A few extra seconds before paying can prevent days of confusion about where your money went.
