When evaluating whether td.com is a scam, the evidence overwhelmingly points to it being the official, secure domain for a major international financial institution. Unlike ephemeral websites that pop up to capture sensitive user data, this domain has been active for over 28 years and serves as the digital hub for millions of banking customers. Established banks are held to strict regulatory and technical standards, which this site meets through current encryption and established digital identity verification. You can be confident that you are interacting with the bank itself rather than an impostor. While searching for td.com reviews is a common practice for any financial platform, the site's massive, multi-decade footprint and integration with official mobile apps provide more reliability than any individual user testimonial could offer. As with any financial service, ensure you are accessing your accounts via this official domain rather than following unsolicited links. This site maintains a standard of professional operation that is expected from a tier-one financial service provider.
In plain English
TD.com is the official website for The Toronto-Dominion Bank and is highly trustworthy. The site's long-standing history, strong security, and global recognition verify its legitimacy as a primary portal for personal and business banking.
Where the score comes from
This site maintains an excellent security posture, utilizing high-grade encryption and strict policies to prevent malicious activity or data interception.
The domain is backed by nearly three decades of verifiable history, directly linked to a major, publicly recognized financial institution.
With a high global traffic rank and a massive archive of activity stretching back to the mid-nineties, this is a cornerstone of the financial sector.
The site provides clear contact paths and official app integrations that align perfectly with its status as a major bank.
It adheres to standard financial service requirements, though it lacks specific disclosures for certain jurisdictions that are often expected of commercial entities.
The technical setup is optimized for performance and reliability, with robust mail server authentication to prevent phishing attempts.
What we checked
Security & Transport
Certificate issued by DigiCert, Inc.
Site has Content Security Policy configured
No threats detected by Google Web Risk
Site enforces HTTPS via HSTS
Cloudflare's malware-blocking resolver (1.1.1.2) answered normally for this domain. These resolvers refuse domains their threat intelligence lists for malware or phishing, and a scam only days old often isn't listed yet. Quad9 gave no usable answer.
Valid certificate, expires in 18 days
Neither a visitor arriving from a Google search nor Google's crawler was sent elsewhere or shown spam that a direct visit wasn't. Cloaking that checks the visitor's network address can't be seen from our server.
Site sets multiple security response headers: CSP, HSTS, X-Frame-Options (via CSP), X-Content-Type-Options
Web server: Apache
Connection uses TLS 1.3
Identity & WHOIS
Site publishes an About / Team / Company page — a transparency signal that the operator is willing to describe who runs the business.
Site has custom branding and social media metadata
No dedicated legal-entity disclosure page detected — common and expected outside the EU, but required for commercial sites in Germany, France, Spain, Italy, and other EU jurisdictions.
The certificate names The Toronto-Dominion Bank (CA), an organisation the certificate authority verified before issuing it. That confirms who holds the certificate, not how they run the site.
Homepage has a contact page link
Domain created 1998-04-15 (28 years, 11 months ago)
Expires in 534 days
ASIC lists Australian financial services licence 530587 as held by "EPOCH INVESTMENT PARTNERS, INC.". Firms often trade under other names, but clone firms also quote real firms' numbers.
Website has both privacy policy and terms of service pages
Prices in $. Certificate issued to an organisation in CA. Page language en-CA. Hosting network registered in NL.
The registration names The Toronto-Dominion Bank as the owner. Owners enter this themselves and registrars don't check it.
Registered through CSC Corporate Domains, Inc.
Infrastructure & DNS
DigiCert, Inc. checked that "The Toronto-Dominion Bank" (CA) controls this domain and owns its BIMI email logo as registered trademark TMA1362018 (CA). The Verified Mark Certificate is valid until 2027-03-19.
Domain enforces strict DMARC — unauthenticated mail is rejected
Not found on any DNS blacklists
Resolves to: 2.16.245.188, 2.16.245.181
Domain is not signed with DNSSEC
DNSSEC status from WHOIS
Mail servers: cluster5.us.messagelabs.com., cluster5a.us.messagelabs.com.
Hosted on: AS20940 AKAMAI-ASN1 (NL)
DNS providers: a1-113.akam.net., a7-65.akam.net., a16-67.akam.net., a10-66.akam.net., a22-64.akam.net., a9-66.akam.net.
Fast page load
Reputation & Reach
Hacker News readers only upvoted links to this site in 2021, and one burst of attention says less than interest over the years. The most upvoted, "A primer on carbon pricing and carbon border adjustments" (2021), got 85 points.
The App Store lists "TD Canada" by "Toronto Dominion Bank Financial Group" (website www.td.com) with 2573 ratings. Its developer gives this domain as its website. The site also links the Android apps com.td, com.tdbank.
og:type declared as webiste
TD Canada Trust products and services include investing, mortgages, banking and small business. Featuring TD Canada Trust online banking
HTML declares lang="en-CA"
Sitemap found with 3 entries
Homepage links to profiles on Facebook, X, Instagram, LinkedIn, YouTube
Site has structured data markup
This is a well-known, high-traffic website
Earliest archive snapshot from 19961227
Website is live and responding
Wikidata, the knowledge base behind Wikipedia, lists this site as the item's official website, and 29 Wikipedia or sister-project articles cover it. It is also the listed website of 3 other items.
robots.txt has 10 directives and references a sitemap
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →