Fake administrative websites: avoid costly traps

Renewing a passport, paying a fine, requesting a criminal record extract, obtaining a vignette: for each administrative procedure, parasitic sites slip into search results — skillful copies of public services that charge for free procedures, sell « unnecessary assistance, » or simply capture your data and card. Tens of thousands of people fall for these each year, with damages ranging from a few dozen euros in « fees » to full identity theft. Here’s how to recognize official sites for sure — and the traps waiting for a rushed search.

The model of fake sites: three levels of scam

Understanding what they sell helps spot them. Level 1 — « legal » parasitism: sites that charge 30, 60, or 90 euros for a free procedure (registration certificate, birth certificate extract, travel authorization) by presenting themselves as an « independent support service » — the mention exists, in small print, somewhere: it’s the gray area thriving on ambiguity, at the limits of the law and sometimes beyond; level 2 — the fake administration: the assumed visual copy (official logos, state graphic charter, administrative tone) that collects the « procedure payment » and provides nothing — pure fraud; level 3 — data harvesting: beyond money, the form captures full civil status, social security number, ID copy, bank details — the complete identity theft kit, resold or exploited to open credit in your name. Entry channels: sponsored ads at the top of search results (scammers buy keywords like « registration certificate, » « vignette, » « ESTA »…), optimized SEO, and follow-up emails/SMS (« your file is incomplete ») that loop back to the fake site.

The golden rule: recognizing an official site in three seconds

The verification lies in the address, and it’s 100% reliable: in France, government sites end with .gouv.fr (or are dedicated institutional domains like service-public.fr, ameli.fr, impots.gouv.fr) — and this suffix can’t be bought: no scammer can obtain it. The pitfalls: « gouv » must be at the end, before .fr — « service-gouv-france.com, » « cartegrise-gouv.net, » « gouv-demarches.fr » are NOT official (the word « gouv » placed elsewhere is just a disguise); the extension matters — .com, .net, .info, .org are never the French administration; and the browser’s padlock proves nothing beyond connection encryption — fake sites have it too. The safest entry point for any procedure: service-public.fr, the official directory that describes each procedure, states if it’s free, and provides the direct link to the right service — starting there eliminates the problem at the root. For foreigners, same logic: each country has its official domains (especially for travel authorizations — fake ESTA and equivalent sites are an industry): go through the embassy or foreign affairs ministry website to find the authentic link.

The right reflex. For your recurring procedures, once and for all, create your official bookmarks list: taxes, health insurance, benefits, retirement, registration certificate, service-public.fr — each site verified once, bookmarked, and ALWAYS opened from that bookmark (never from a search, never from an email link). This single action removes 90% of the risk: you don’t land on a fake site when you’re no longer looking for one. Do the same for a parent’s phone — it’s a lasting security gift.

Warning signs on the page itself

You’re on a site and doubt creeps in? Converging clues: payment demanded for a free procedure — the vast majority of French administrative procedures are free or have regulated fees listed on service-public.fr: any « processing fee, » « expedited service fee, » « mandatory assistance » is a red flag; manufactured urgency (« processing within 24h or penalties, » countdowns) — real administration notifies by mail and personal space, without a timer; disproportionate requests — a site demanding the front-and-back copy of the ID, bank details, and social security number for a simple request harvests more than it processes; legal notices — absent, or revealing a private company based abroad where an institution is expected; and the process — real administration authenticates via FranceConnect (the official button using your tax/Ameli credentials), fake sites want to create « their » account and collect fast. Just one of these signals is enough: close the tab and restart from service-public.fr — the procedure will still be there.

Victim or almost: reacting based on what was given

The response depends on what the fake site obtained. Money (payment for a fake procedure): dispute with the bank (fraud or service not rendered), oppose the card if the full number was entered, report on the official scam platform — and for « gray zone » sites, exercise the right of withdrawal and report to fraud repression, which regularly sanctions them. Credentials: change the password everywhere it’s reused, enable two-factor authentication immediately. Identity documents — the most serious case: monitor your accounts and mail (credits, account openings in your name), report potential identity theft, and know that in France, filing a complaint is fully justified as soon as an identity document has been captured — keep all evidence (site screenshots, emails, statements). In all cases: the real procedure still needs to be done — do it on the official site (the fake one obviously transmitted nothing), and warn your entourage: the fake site that got you is probably at the top of the same searches for others.

Frequent questions

A site charged me 79€ for a free procedure but « actually » did it: is this a scam?

At minimum, it’s deceptive commercial practice if the site pretended to be official or didn’t clearly state its private status and the free nature of the direct procedure. Withdrawal, bank dispute, and reporting to fraud repression are your levers — and they often work.

Is FranceConnect safe?

Yes — it’s the official State authentication gateway, specifically designed to avoid multiplying accounts. Just verify that the FranceConnect button takes you to a .gouv.fr page before entering your credentials — fake sites sometimes imitate the button, never the domain.

How to verify a foreign administrative site (visa, travel authorization)?

Single starting point: the country’s file on the foreign affairs ministry website (diplomatie.gouv.fr) — it provides the official link for each authorization. Fake visa sites prey on rushed travelers who directly search « visa + country »: always go through the official directory.

What to remember

Fake administrative sites thrive on three weaknesses: rushed searches (and their bought ads), ignorance of the true official suffix, and the habit of paying without verifying. The three countermeasures are definitive: .gouv.fr at the end or nothing (the suffix can’t be bought — « gouv » elsewhere in the address is a disguise); service-public.fr as the entry point for any procedure (free or not, it states it); and the official bookmarks list that replaces search for recurring administrative tasks. On the page: charged gratuity, countdown urgency, or document harvesting = close the tab. And if you fall: quick dispute, passwords changed, identity vigilance — then the real procedure, in the right place. Administration has its flaws, but it has a rare quality: its address never lies.