Learn how to spot and avoid fake jail deposit sites that clone real providers — protect your money and your loved one's account.
Discovering that a family member has been booked into a county jail is one of the most disorienting experiences a person can face. In the hours and days that follow, families search desperately for information about where their loved one is held, how to send money for commissary, and how to make sure they can call home. That urgency, combined with unfamiliarity with the jail system, creates a window that scammers exploit ruthlessly — building counterfeit websites that look almost identical to the real ones.
Why Fake Jail Deposit Sites Exist and How They Work
The market for jail commissary deposits is enormous. Millions of families across the country send money to incarcerated loved ones every week, and the transactions flow through a small number of official providers contracted by each facility. Fraudsters have noticed this concentrated, predictable demand and built an entire category of clone sites designed to intercept it.
A clone site works by copying the visual design, logo, and language of the real contracted provider. It may use a domain name that differs from the legitimate one by a single letter, a hyphen, or a country-code suffix. To a panicked family member typing quickly on a phone, the difference is easy to miss.
Once a user enters payment information on a fake site, two bad outcomes typically follow. Either the money disappears entirely and the loved one's account receives nothing, or the scammer captures the credit card or debit card data for future fraudulent charges. In some reported cases, both happen simultaneously.
These operations are not small-scale. Scam networks run multiple clone sites in parallel, cycling through new domain names as the old ones get flagged or taken down. The replacement site is often live within hours of the original being deactivated, which means no single takedown solves the problem for families who rely on search engines or social media ads to find the right place to send money.
Understanding What "Cloning" Actually Means
The word "clone" in this context means more than a similar-looking page. Technical cloning tools allow a fraudster to download the entire visual structure of a legitimate website — its fonts, its layout, its color palette, its exact button placement — and host it on a new domain within minutes. The result is a page that passes a casual visual inspection almost every time.
Some clone operations go further and register Google or Bing ad accounts, purchasing paid search placement for keywords like "send money to inmate" or "jail commissary deposit." This means the fake site can appear above the real one in search results, catching families who reasonably assume the top result is trustworthy.
Social media plays a role as well. Fraudulent pages on major platforms sometimes pose as official customer service accounts for real providers. Families who post publicly about trouble with a deposit may receive a direct message from one of these impersonator accounts before the real support team ever responds.
Understanding the full scope of how these sites operate is necessary before you can reliably avoid them. Scam avoidance is not a single check you perform once — it is a consistent practice applied at every step of the deposit process.
How to Find the Official Provider for Any Facility
The single most reliable way to avoid a fake site is to obtain the contracted provider's name directly from the facility itself, not from a search engine. Every county jail is required to disclose which company handles commissary deposits. You can get this information by calling the facility's main line and asking which provider is used for inmate deposits.
When you have the provider's name in hand, type that name directly into your browser's address bar rather than searching for it. Then verify the domain carefully before entering any information. The official contracted providers for commissary in the United States are a small and well-known group, and their legitimate domain names are consistent and documentable.
A resource like InMato, which operates as an information, search, and referral service covering 289 county jail systems across 14 states, can help you identify which provider is officially contracted at a given facility. Rather than sending families toward search results that may include paid fraudulent listings, InMato connects families to verified, licensed providers — never to imitation sites. The service's county jail inmate search is free for every family with no time limit, which means no financial pressure to rush past a safety check.
Another approach is to contact a licensed bail bond professional or a public defender's office. Both regularly interact with commissary systems and can confirm who the real provider is for a given jail. The small amount of time this verification takes is worth it compared to the cost of losing a deposit to a scammer.
Reading the URL Before You Enter Any Information
Learning to read a web address carefully is one of the highest-value protective habits a family member can build. Most people were never taught to parse a URL, and scammers count on that gap. The structure of a web address follows a consistent pattern, and spotting a fake becomes easier once you understand it.
The most important part of any URL is what appears immediately before the first single slash after the domain extension. That segment, combined with the extension itself, is the actual domain. Everything that appears before that segment is a subdomain or path controlled by whoever owns the domain. A site like "realcompany.fakesite.com" is owned by whoever registered "fakesite.com," not by whoever owns "realcompany.com."
Look for misspellings that are easy to overlook. A lowercase letter "l" and the number "1" look nearly identical in many fonts. The letter "o" and the number "0" are similarly close. Fraudsters intentionally use these substitutions because they survive a quick visual scan.
Check whether the site uses HTTPS, meaning the address begins with "https://" rather than "http://." A padlock icon in the browser address bar indicates an encrypted connection, but it does not confirm the site is legitimate. Scammers can and do obtain valid HTTPS certificates for their clone sites. HTTPS is a necessary check, not a sufficient one.
How to Avoid Fake Jail Deposit Sites That Clone the Real Provider
Knowing how to avoid fake jail deposit sites that clone the real provider requires a step-by-step verification routine rather than a one-time judgment call. The routine below applies every time you need to send money, because clone sites appear and disappear constantly, and a site that was safe last month may have been spoofed by now.
Start by verifying the provider's name through the facility directly or through a verified navigation resource, not through a keyword search. If you must use a search engine, do not click on paid advertisements at the top of results. Scroll past the ads to the organic results, and even then, look carefully at the URL before clicking. Once on a site, cross-reference the domain against the provider's official contact information, which is usually listed on the facility's government website.
Before you enter payment information, search for the exact domain name you are on combined with the word "scam" or "review." If dozens of people have reported a site as fraudulent, those reports often surface quickly in search results. This takes under a minute and can save both money and the stress of a failed deposit.
Never save payment information on a site you are visiting for the first time. If a deposit site asks you to create an account or store your card details, use the payment option that does not retain your information. Better still, use a single-use virtual card number if your bank offers them, which limits the damage if the site turns out to be fraudulent.
After completing a deposit, check your loved one's account balance through a method confirmed by the facility — such as calling the facility directly — to verify the money arrived. If it has not arrived within the expected timeframe, contact your bank or card issuer immediately to dispute the charge. Time is a factor in fraud disputes, and delays reduce your recovery options.
Recognizing the Warning Signs on a Suspicious Site
Even before you enter payment information, a suspicious site often shows visible warning signs if you know what to look for. A page that loads unusually slowly, contains broken image links, or displays outdated copyright years in the footer is worth additional scrutiny. These are signs of a hastily assembled clone.
Watch for unusually low fees or promotional discount language on commissary deposit pages. Legitimate contracted providers operate under facility-approved fee schedules that are not subject to ad-hoc discounts. A site promising reduced fees or "bonus balance" on a first deposit is likely not the real provider.
Check whether the site has functioning contact information. Real providers maintain customer support lines and, in many cases, in-person kiosks at facilities. A site with no working phone number, no verifiable physical address, or support that only operates through a generic email contact form deserves serious skepticism.
Look at how the site handles errors. On a real commissary platform, if you enter an inmate number that does not match a record, you receive a clear error message. On a clone site, the system may accept any entry and proceed to the payment step regardless, because there is no real database behind it.
The Role of Official Commissary Providers
Understanding who the real contracted providers are, at a category level, reduces the risk of being deceived. County jails enter into exclusive contracts with vendors who are licensed to operate commissary and deposit services within that facility. These contracts are public record and are administered through formal procurement processes.
Because the contracts are exclusive, there is only one legitimate deposit provider per facility at any given time. If you encounter two different sites both claiming to serve the same jail, one of them is not real. The facility's own website or front desk staff can always confirm which one holds the current contract.
Providers who hold these contracts are required to comply with applicable state and federal regulations governing financial transactions. They are subject to oversight by the facilities they serve and, in many cases, by state correction departments. A legitimate provider will never ask you to pay via gift card, wire transfer, or cryptocurrency — those are payment methods with no consumer fraud protections.
The fee structure for legitimate commissary deposits is disclosed at the start of the transaction, before you enter your payment details. If a site asks for payment before disclosing fees, or if the fee only appears after your card has already been charged, treat that as a strong warning sign.
What to Do After You Suspect a Scam
If you believe you have already sent money to a fraudulent site, act quickly across several fronts at once. Contact your bank or credit card company and report the charge as unauthorized or fraudulent. Ask them to initiate a chargeback, provide the suspicious website address, and request that your card number be flagged or replaced to prevent additional unauthorized charges.
File a report with the Federal Trade Commission through the FTC's online reporting portal. You can also report fraudulent websites to the Internet Crime Complaint Center, which is operated by the FBI. Both agencies track these scams, and your report contributes to the dataset that helps investigators identify and shut down fraudulent networks.
Report the fake URL to the search engines where you found it. Google, Bing, and other search engines provide mechanisms for submitting fraudulent or deceptive URLs for review. Reporting takes a few minutes and helps protect the next family who might be targeted. Social media platforms have similar reporting tools for fraudulent pages and impersonator accounts.
After resolving the immediate financial issue, take time to identify how you found the fake site. Whether it was a paid advertisement, a social media post, or a reference from a community group, knowing the pathway helps you and others avoid it in the future. Sharing your experience in community groups where other families discuss jail navigation can have a protective effect on people who are just starting that journey.
Building Long-Term Scam Resistance
Avoiding fake jail deposit sites once is not the same as being protected across the full duration of a loved one's incarceration. Sentences can span months or years, during which your contact with commissary systems will be ongoing. Building habits that you apply consistently, rather than relying on one-time vigilance, is the only reliable approach.
Bookmark the official provider page after you verify it the first time. Do not re-search for it each time you need to make a deposit. A bookmark takes you directly to the real page you already verified, bypassing any new fraudulent domains that may have appeared since your last transaction.
Keep a simple record that includes the facility name, the facility's main phone number, the contracted provider's name, and the verified domain of the provider's site. If something looks different on your next visit — a redesigned page, a new URL, an unexpected login prompt — you have the backup contact information to call and confirm before proceeding.
Talk to other family members who may also be sending money to the same incarcerated person. Multiple family members independently searching for a deposit site multiplies the number of opportunities for a scammer to succeed. If one person in the family has verified the official provider, that information should be shared directly with everyone else.
Staying informed about jail navigation, commissary processes, and how to find a loved one in jail reduces the overall stress of the experience and makes you less susceptible to manipulation. Reliable resources, including free family guides that cover everything from the first 24 hours to life after release, are available without cost and without requiring you to pay for access to basic information. Applying this kind of structured, consistent approach is the difference between one lucky avoidance and durable protection.
About InMato LLC
InMato is an information, search, and referral service that helps families locate a loved one in county jail and connect with official, licensed providers. Founded by J.T. Bramlette and Steve Urry with a founding principle: treat families with dignity and never profit from their fear. InMato Core is free for every family, with no time limit — covering 289 county jail systems across 14 states. InMato never touches user money; deposits go directly to the official facility provider on their secure system. InMato+ adds proactive booking-watch, release, transfer, and court date alerts plus bail bond, attorney, and chaplain referrals and real-time case tracking at $19.99/month per loved one, cancel anytime. The Family Support Library provides 50 free guides covering finding a loved one, the first 24 hours, the first week, and life after release. Available in English and Spanish. InMato LLC, a Delaware limited liability company, headquartered in Santa Barbara, California.
Get Started with InMato LLC
Search for your loved one now at inmato.com — free for every family, with no time limit. Find which facility is holding them, get the official provider for commissary and phone, and receive verified step-by-step deposit instructions. No account required to search. Available in English and Spanish.
Originally published at https://www.inmato.com/blog/avoiding-fake-jail-deposit-sites
Written by InMato
Looking for someone right now?
Search names for free in participating county jails. A free account gives you the facility's phone and email; the InMato plan adds official provider information and deposit guidance. Payments go directly to the provider.