# Check if a Converter Site Is Legit Before Uploading - Author: CheapBankConvert (https://cheapbankconvert.com) - Published: 2026-10-17 - Category: Safety and trust - Canonical: https://cheapbankconvert.com/blog/check-if-a-converter-site-is-legit > How to check if a converter site is legit before uploading a statement: company details, contact, domain age and payment page signs. To check if a converter site is legit, find the company behind it, send it a test email, look up how long the domain has existed, and inspect the payment page before you pay. A real business shows a name, answers questions and uses a known payment processor. Missing any of these is reason to wait. ## Company details that show a converter site is legit A legitimate converter site names the business that runs it. Look in the footer, the terms of service and the privacy policy for a company or trading name, and ideally a country or address. A site that hides who operates it is asking you to trust nobody in particular with your statement. ### Where the name should appear Check three places, because a legitimate business is usually consistent across them: - **The footer**, which often carries a copyright line with a business name. - **The terms of service**, which must say who you are agreeing with. - **The privacy policy**, which should name the party responsible for your data. If the footer says one name and the terms say another, or the terms refer to "the Company" without ever saying which one, note it as a weak point. ### Matching the name to the outside world Search the business name on its own, without the site name. A real company tends to leave traces: other products, a professional profile, a support forum, news mentions or complaints. A name that returns nothing except the site itself may be invented. Complaints are not automatically bad. How the company answers them often tells you more than their number. ### Small does not mean fake A new or one-person company can be perfectly legitimate. What matters is that it says who it is and gives you a way to hold it to its promises. A small site that names its owner and answers email is often a better bet than a large one that names nobody. ## Contact test: does the converter site answer a real email? The contact test is simple: send the site a short question by email before you upload anything, and see whether a person replies. A legitimate converter business answers within a day or two. A site that offers only a form, or never replies, has given you no way to reach it if something goes wrong. ### A good test question Ask something with a factual answer that the site's pages should support. For example: "How long do you keep an uploaded statement, and is the converted file deleted too?" A useful reply is specific and matches the privacy policy. A vague or copied reply, or one that contradicts the policy, is a warning. ### What the contact details should look like A working email address on the site's own domain is better than a free webmail address. A contact form alone is not proof of anything, because forms can lead nowhere. A postal address helps but cannot be checked easily, so weigh the email reply more heavily. ### When to send it Send the question before you need the conversion. If your deadline is tomorrow, there is no time to learn that nobody answers, and that is exactly when people upload to a site they have not vetted. ## Domain age and the address bar of a converter site Domain age is how long the site's web address has been registered, and it hints at whether the business has a history. Look it up for free with a registration data lookup service, which usually lists a creation date. A domain registered last month is not proof of fraud, but it should raise your standards for the other checks. ### Reading the result Treat domain age as one input, not a verdict. Many honest products are new, and an old domain can change hands. A young domain combined with no company name and no email reply is a strong pattern. A young domain with a named owner and quick answers is just a young business. ### Checking you are on the real address Look-alike addresses are a common trick. A converter's name with an extra letter, a hyphen or a different ending can lead to a copy of the real site. The FTC's guide to [recognizing and avoiding phishing scams](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams) advises contacting a company using a phone number or website you know is real, rather than one from a message. Type the converter's address yourself, or use a bookmark, instead of clicking an emailed link. ### The lock icon is the minimum The address should start with https and show the browser's lock or similar mark. Almost every site has this now, including fake ones, so it proves only that the connection is encrypted. It says nothing about who is on the other end. ## Payment page signs on a legit converter site A legitimate converter site takes payment through a recognizable checkout, states the price before you enter card details, and says whether the charge repeats. The payment page is where many doubtful sites reveal themselves, through hidden renewals, odd payment methods or a form that asks for more than a purchase needs. ### Good signs - **A known payment processor**, where the card form is handled by an established checkout provider. - **The price shown before the card form**, including whether it is one-time or recurring. - **A receipt by email** with a business name that matches the site. - **A stated refund policy** you can read before paying. [What to read in a PDF converter refund policy before buying](/blog/pdf-converter-refund-policy) covers what a fair one looks like. ### Warning signs - A "free" conversion that asks for card details anyway. - A trial that renews into a subscription, mentioned only in small print. - Payment requested by gift card, wire transfer or cryptocurrency for an ordinary conversion. - A card form that also asks for your online banking login, which no converter needs. ### A note on price A paid site is not automatically trustworthy, and a cheap one is not automatically suspect. [CheapBankConvert](/), for instance, is in early access and lists one-time early prices on its homepage, such as $2.99 for a statement of up to ten pages, with no subscription. Whatever the site, the point is that the price is visible before you pay. ## Converter site red flag: a download button where an upload should be The clearest red flag on a converter site is a large download button where you expected an upload box. An online converter takes your file. If the site instead pushes you to download a program, a browser extension or an "updater", you are being asked to run software, not to convert a statement. ### Why this trick works Many free converter pages carry advertising, and some ads are designed to look like the site's own buttons. A green "Download" or "Start" button above the real upload box draws clicks. The FTC's [guide to malware](https://consumer.ftc.gov/articles/malware-how-protect-against-detect-and-remove-it) advises against clicking ads to download software, and suggests going to a software maker's site by typing its address. ### Other tricks to leave on - A pop-up claiming your computer is infected or your browser is out of date. - A request to allow notifications before the conversion starts. - A message that your file is "ready" in an attached program or an archive you must unzip. ### If you want software, choose it on purpose There are good reasons to convert on your own computer, especially for statements. If that suits you, pick the program deliberately rather than through an ad, and compare the [free offline PDF to Excel converters for Windows and Mac](/blog/pdf-to-excel-converter-free-offline) first. ## What should a legit converter site say about your file? A legitimate converter site states, in plain words, how it protects an uploaded file, how long it keeps it, and whether it uses the contents for anything beyond your conversion. Look for encryption, a deletion time and a clear line about training or sharing. Silence on all three is the most common gap. ### The three statements to find 1. **Encryption.** A sentence saying files are encrypted in transit and at rest. 2. **Deletion.** A specific event or number of hours after which the file is removed, covering both the upload and the output. 3. **Use of contents.** Whether files are reviewed by staff, shared with partners or used to improve the product. The third one has grown more important as converters add AI features. [Whether AI converters train on your files, and how to read their terms](/blog/do-ai-converters-train-on-your-files) explains the wording to look for. ### Where you upload from matters too A legit site still cannot protect a file once it sits on a computer other people manage. If the only machine you have is your employer's, read [what happens when you convert a bank statement on a work computer](/blog/convert-bank-statement-on-a-work-computer) before you start, because the site is only half of the picture. ## A ten-minute legitimacy check on a converter site The full check takes about ten minutes and uses only public information plus one email. Score each item pass or fail, and stop if the first three fail. The worked example below scores an invented site, "example-convert", to show how the results combine. ### Worked example scorecard All details below are made up for illustration. | Check | What was found on the example site | Result | | --- | --- | --- | | Company named | Footer and terms both name "Example Convert Ltd" | Pass | | Name has outside traces | A support forum and two years of product updates | Pass | | Email reply | Answered the retention question in one day, matching the policy | Pass | | Domain age | Registered about three years ago | Pass | | Real address typed in | Bookmark matches; no look-alike spelling | Pass | | Payment page | Known checkout, price shown, says "one-time" | Pass | | No download push | An ad above the upload box offered a "PDF tool" installer | Fail | | File statements | Encryption stated; deletion "after 24 hours"; silent on training | Partial | ### Reading the example This site passes the core checks: it names itself, answers email and takes payment honestly. The ad is the site's weakest point, but it is a hazard to avoid rather than a reason to distrust the company. The missing line on training is worth one more email. Overall, the example would be reasonable for a statement, provided you upload through the real box and ignore the installer. ### When the result is mixed If a site fails one or two minor checks, reduce what you send. Remove pages you do not need, or try a converter that previews part of the file first. If it fails the company, contact or payment checks, use another site. There are enough converters that you never need to accept a site that will not say who it is.