To verify a dark web site is safe, reverse the direction of trust: instead of copying a link from a directory or forum, make the service give you its own address. Start from a verified clearnet page, such as the service’s official website, a public code repository, or a signed social media profile. Look for an Onion-Location header or a visible onion address posted there, and confirm the page uses HTTPS with a certificate that matches the organization. Then copy the .onion address manually and check every character—especially base32 letters and digits—for substitutions like 1/l/I, 0/o, or 7/T. Save the verified address in your own password manager or encrypted note, not in a shared browser bookmark. Never trust a directory link, even if it looks well-made; directories can be seized, copied, or run by attackers. Assume any market, mixer, or service that requests payment upfront is unsafe. If the site offers PGP-signed instructions, verify the signature with a key you already trust from a separate channel.
- Most robbery starts with an unverified link
- Use Onion-Location: let the service hand you its own address
- Verify every character, not just the start and end
- Directories like The Hidden Wiki are not trustworthy sources
- Any market is unsafe regardless of reputation
Nearly every robbery on the dark web begins the same way: someone trusts a link they shouldn't have. Verifying that a site is genuine — not a phishing clone — is the single most important safety skill there is. And it's a method, not a checklist you can eyeball.
The trap
You copy an onion link from a directory, a forum post, or a dark web search engine result. It's a look-alike address one or two characters off the real one. You're phished — your credentials or payment go straight to the scammer. Because no human reads 56 random characters, this works constantly.
Reverse the direction of trust
The defence is to stop taking addresses from strangers and instead make the service give you its own. The cleanest way uses a feature called Onion-Location: many legitimate services — the BBC, ProPublica, DuckDuckGo — advertise their official onion address directly from their normal, verified clearnet website. Visit their ordinary site in Tor Browser, and it offers you the verified onion address, so you never copy a link from anywhere untrusted.
The gold standard: the address came from the operator's own verified site, not from a stranger's link. Where Onion-Location isn't available, find the service's official presence first, get the address there, and verify every character.
Don't trust directories
Directories like The Hidden Wiki are useful for discovering that a category of service exists, but any specific link in one is unverified by definition, and many are outright malicious. A directory is a starting point for research, never a source of addresses to trust.
Other signs to check
- Verify the full address — every character, not just the memorable-looking start and end.
- Be wary of urgency — pressure to act fast or pay now is a scam signal.
- Never enter real details or download files even on a “verified” site — verification isn't a licence to drop your other defences.
- Assume any market is unsafe regardless of reputation — the whole model is built to expose the buyer.
Frequently asked questions
How do you know if a dark web site is safe?
Reverse the direction of trust: instead of copying a link from a directory, make the service give you its own address, ideally via Onion-Location from its verified clearnet site. Then verify every character. Never trust a directory or forum link blindly.
What is Onion-Location?
A feature where legitimate services advertise their official onion address directly from their normal verified website. Visiting their ordinary site in Tor Browser offers you the verified onion address, so you never copy a link from an untrusted source.
Is the Hidden Wiki safe?
Treat it as a starting point for discovering what categories of service exist, never as a source of trustworthy addresses. Any specific link in a directory is unverified by definition, and many are malicious clones.
How do you avoid phishing on the dark web?
Never trust an address you didn't obtain and verify from the operator's own channel, and check every character — clones differ by one or two. Reversing the direction of trust with Onion-Location defeats most phishing.
Can a verified dark web site still be dangerous?
Yes. Verification confirms you reached the genuine service, but you should still never enter real details or download files, and any marketplace is unsafe by design regardless of how genuine it is.