Chapter 2 of 6 / is this the real one
The page looks slightly different
Something about it is off. A colour, a missing menu, a login box in the wrong place. The feeling is worth acting on, and the thing to act on is not the feeling.
What it usually turns out to be
| Cause | How often | What settles it |
|---|---|---|
| An ordinary update | Most of the time | Sites change. Nobody announces a moved button |
| A different address in the set rendering slightly differently | Common | Not everything is served identically |
| Your browser blocking something | Common | A higher security setting changes how pages look |
| A copy | Uncommon | Only a signature settles this, not the layout |
Why appearance cannot answer this
A page is a file. Copying one takes a right click and a save, and the copy renders identically because it is the same file. There is no visual property, no logo detail and no layout quirk that survives that as a distinguishing mark.
Which means the observation runs both ways and is useless in both. A page that looks perfect proves nothing, and a page that looks slightly off proves nothing either. Most of the odd looking ones are real.
The trap is the reassuring version, not this one
The reverse is worth stating plainly. People relax when a page looks exactly right, and looking exactly right is the one thing a copy is guaranteed to do. If appearance is going to influence you at all, it should be in the direction of checking, never in the direction of skipping the check.
What to do with the feeling
- Do not type anything yet. Whatever you were about to enter is the thing at risk.
- Compare the address in the bar against your saved copy. Five seconds.
- Check a signed statement against your pinned fingerprint. A minute.
- Then carry on, or leave. Either way the decision now rests on something rather than on an impression.
Things that look alarming and are not
- Missing images or broken layout. Usually your security setting blocking things, which is it doing its job.
- A different font. Same reason.
- A queue or waiting page you have not seen before. Load control, and it comes and goes.
- A new warning banner. Read it, then check whether it is signed. Unsigned it is just text.
The one visual thing that is worth acting on
A login form appearing somewhere it was not before. Not because the position of a form proves anything, but because it is the one change that alters what you are about to do, and anything that moves a credential field into your path deserves the thirty seconds it costs to check the address first.
Everything else about a layout is noise. Colours, spacing, a menu that moved, a font that changed. Those are what ordinary maintenance looks like from outside, and reacting to them trains you to react to the wrong category of thing.
What to do if you cannot shake the feeling
Log out, close it, come back later through an address you have compared, and check a signature. Acting on an unease you cannot articulate is fine as long as the action is a check rather than a decision. Where it goes wrong is when the feeling leads somebody to go looking for a different address instead, which is how a vague worry turns into a real problem.