Is barclays.com legit?
This site appears trustworthy. While there are a few minor areas for improvement, like reducing external scripts and implementing DNSSEC, the site has a strong security posture, a long-standing history, and good infrastructure overall.
Finance average: 81/100 · based on 48 sites
Checked: April 27, 2026 at 8:51 AM UTC
Is barclays.com a scam? Here's what we found.
The site uses a modern TLS 1.3 connection with a valid certificate from a reputable issuer and has robust clickjacking protection. While the number of external scripts is a minor concern, Google Web Risk reports the site as clean.
This is an extremely old and well-established domain, registered for over 32 years, indicating a long-term, stable online presence. The WHOIS information is publicly available and managed by a corporate registrar, which is expected for an institution of this size.
The domain has a significant global traffic rank and a long history, supporting its reputation. It is not found on any DNS blacklists, reinforcing its clean standing, although Trustpilot and Web Archive checks were inconclusive.
Contact information, privacy policy, and terms of service are all easily accessible, promoting user trust. However, the absence of social media links on the homepage is a minor oversight for a modern digital presence.
The presence of both a privacy policy and terms of service pages demonstrates a commitment to legal and user agreement compliance, which is crucial for a financial institution.
The site exhibits good infrastructure with HSTS, DMARC, and responsive email servers, ensuring reliable and secure communication. The lack of DNSSEC is a minor point, and the redirect away from the primary domain is slightly suboptimal for direct access.
Signals Detected
This site has moderate global traffic
Site has structured data markup
Excessive number of external scripts — may indicate malicious injection
Valid certificate, expires in 154 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1993-11-23T05:00:00Z (32 years, 10 months ago)
Registered through CSC Corporate Domains, Inc.
Expires in 208 days
DNSSEC status from WHOIS
Site redirects to https://home.barclays/
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
No threats detected by Google Web Risk
Resolves to: 104.103.203.85
Mail servers: mxb-00146204.gslb.pphosted.com., mxa-00146204.gslb.pphosted.com.
Domain has DMARC email authentication configured
DNS providers: a1-71.akam.net., a12-64.akam.net., a10-66.akam.net., ns7.barcap.com., ns2.barcap.com., a18-65.akam.net., ns3.barcap.com., a11-67.akam.net., a9-66.akam.net.
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
No social media links found on homepage
robots.txt has 4 directives and references a sitemap
Site has custom branding and social media metadata
Site maintains a proper sitemap with 2993 indexed pages
crt.sh returned status 502
Not found on any DNS blacklists
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.