Is jpmorgan.com legit?
jpmorgan.com is a highly trusted website. Its decades-long domain age, robust security measures, and established financial institution branding confirm its legitimacy and operational integrity.
Finance average: 80/100 · based on 48 sites
Checked: April 18, 2026 at 8:12 AM UTC · Refresh
Is jpmorgan.com a scam? Here's what we found.
The site boasts strong security with modern TLS 1.3, HSTS, and a Content Security Policy, indicating a serious commitment to protecting user data, which is paramount for a financial institution. Google Web Risk also finds it clean.
With a domain age of over 34 years registered through MarkMonitor, there's no doubt about the long-established identity of JPMorgan. The domain's extended expiry reinforces its long-term operational intent.
Its Tranco rank signifies high traffic and recognition as a major online presence. The absence of DNS blacklist entries and long history contribute to an excellent reputation.
The website provides clear contact information, complete branding, and links to multiple social media platforms, demonstrating a high level of transparency fitting a major corporation.
The presence of both a privacy policy and terms of service pages indicates adherence to legal and regulatory requirements expected of a large financial services provider.
The infrastructure is well-maintained with multiple IP addresses, robust email authentication (SPF and DMARC), and reliable name servers, all indicating a professional and resilient setup.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1992-04-24T04:00:00Z (34 years, 5 months ago)
Registered through MarkMonitor Inc.
Expires in 737 days
DNSSEC status from WHOIS
crt.sh returned status 429
Resolves to: 146.143.134.109, 146.143.198.109, 146.143.70.109
Mail servers: cluster14.us.messagelabs.com., cluster14.us.messagelabs.com., cluster14.us.messagelabs.com., cluster14a.us.messagelabs.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns2.jpmorganchase.com., ns0098.secondary.cloudflare.com., ns06.jpmorganchase.com., ns1.jpmorganchase.com., ns0221.secondary.cloudflare.com., ns05.jpmorganchase.com.
Not found on any DNS blacklists
robots.txt has 7 directives and references a sitemap
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
No threats detected by Google Web Risk
Site maintains a proper sitemap with 68 indexed pages
Valid certificate, expires in 45 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
Site has custom branding and social media metadata
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.