FYI, for point one about SSL, SSL not guarantee if that website not a scam or phishing anymore. Lot of phishing and scam project using SSL to tricked user. This thread can be a good read for you Half of all Phishing Sites Now Have the Padlock Sign - by Pmalek. Another thread that full list to avoid scam by tbct_mt2 can be a good source for all of member: Collection of comprehensive guides on identify and avoid scam projects