Is barclays.com legit?
Barclays.com is a highly trusted website, which is expected for a major financial institution. While there are a couple of minor points like the lack of a Trustpilot profile and its redirect, these don't detract from its overall legitimacy.
Finance average: 80/100 · based on 48 sites
Checked: April 18, 2026 at 7:56 AM UTC · Refresh
Is barclays.com a scam? Here's what we found.
The site employs a robust security setup with the latest TLS 1.3 encryption and a valid certificate from a reputable issuer, DigiCert. Strong protections like HSTS and clickjacking prevention further solidify its security posture, and Google Web Risk confirms no threats.
With a domain age of over 32 years, registered through a professional corporate registrar like CSC, there's a clear and long-established identity for Barclays. This longevity is a strong indicator of legitimacy.
The site holds a respectable Tranco rank, indicating significant global traffic. It's clean on all DNS blacklists and has a long-standing web presence, despite the absence of a Trustpilot profile.
Barclays.com provides clear contact information, essential legal pages like privacy and terms, and complete branding. The only slight drawback is the missing social media links on the homepage, which could hinder some users seeking alternative communication channels.
The presence of both a privacy policy and terms of service pages, along with structured data markup, indicates Barclays adheres to important compliance standards for its industry. These are fundamental for user confidence.
The site benefits from solid infrastructure, including fast page load times, proper email authentication (SPF and DMARC), and robust DNS resolution. The only minor point is the redirect away from the root domain, but this is a controlled process.
Signals Detected
This site has moderate global traffic
Site has structured data markup
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1993-11-23T05:00:00Z (32 years, 10 months ago)
Registered through CSC Corporate Domains, Inc.
Expires in 217 days
DNSSEC status from WHOIS
Valid certificate, expires in 163 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
crt.sh returned status 429
Resolves to: 23.197.137.188
Mail servers: mxb-00146204.gslb.pphosted.com., mxa-00146204.gslb.pphosted.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: a9-66.akam.net., ns2.barcap.com., a11-67.akam.net., a12-64.akam.net., a18-65.akam.net., a10-66.akam.net., a1-71.akam.net., ns7.barcap.com., ns3.barcap.com.
Site redirects to https://home.barclays/
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
No threats detected by Google Web Risk
robots.txt has 4 directives and references a sitemap
Site has custom branding and social media metadata
Site maintains a proper sitemap with 2984 indexed pages
Not found on any DNS blacklists
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
No social media links found on homepage
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.