WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Healthequity.com

Report Date October 30, 2025
Recommendation
Caution
Overall Summary
Suspicious
Why we think so

HealthEquity.com is a well-established finance website focused on health savings accounts (HSAs) with about 4.1 million monthly visits, mostly from the U.S. The domain is secure and uses multiple trusted technologies and payment methods, including Amazon servers and major credit card processors. It has an official trademark registration and is not blacklisted or flagged in security databases. However, a significant data breach affected 4.3 million customers in 2024, leading to legal and customer disputes related to personal data exposure and some cases of fraudulent transactions reported by users. The site remains legitimate but has ongoing challenges in handling fraud and breach aftermath, reflected in consumer complaints and lawsuits.

Confidence Score
80%

Risk Insights

📊

Large User Base and Legitimate Traffic

About 4.1 million monthly visits primarily from the US.
Low bounce rate and high user engagement.
Shows active and substantial usage indicating operational service.
🛡️

Strong Security and Tech Stack

Valid SSL certificates through early 2026.
Hosting via reputable providers like Amazon and Cloudflare.
Use of trusted payment and marketing platforms.
⚠️

Data Breach and Customer Complaints

2024 data breach exposed info of 4.3M users.
Multiple lawsuits and consumer complaints recorded.
Fraud cases and refund disputes reported, impacting trust.

Contradictory Signals

Despite a well-established domain and official trademark protections, the 2024 incident and resulting fraud undermined user trust and triggered legal disputes.

Signal A: Strong domain legitimacy and active usage

Signal B: Significant recent data breach and fraud complaints

Category Scores

Identity 85/100
Reputation 65/100
Technical 90/100
Content 80/100
Legal 50/100
Business Validity 80/100

Red Flags & Warnings

  • Major 2024 data breach exposed sensitive information of 4.3 million customers, increasing risk of fraud and identity theft.
  • Customer complaints about unresolved fraud losses and difficulties in refund or dispute processing.

🔎 Detailed Checks & Analysis

Domain and Technology Infrastructure

Score: 90/100
Passed

"The site employs multiple recognized payment platforms and marketing technologies, supporting its operational legitimacy."

Reason: Domain uses reputable hosting, security certificates are valid, and technology stack includes trusted providers like Amazon and Cloudflare.

Traffic and Usage Metrics

Score: 85/100
Passed

"Bounce rate is low and time on site is high, indicating substantial user interaction."

Reason: High monthly visits (~4.1 million) mainly from US with strong engagement metrics support real user base and ongoing use.

Trademark and Brand Legitimacy

Score: 88/100
Passed

"Registered trademarks confirm legitimate business identity and brand usage rights."

Reason: Official USPTO trademarks are active and show long-term registration linked to HealthEquity, Inc.

Security and Blacklist Status

Score: 95/100
Passed

"No phishing or malware warnings detected related to the domain."

Reason: No blacklist flags from crypto or security services; SSL certificates are valid and updated.

Reputation and Legal Issues

Score: 40/100
Failed

"While the business is legitimate, breach impacts and customer issues decrease trust and increase risk for users."

Reason: Data breach in 2024 exposed millions of customer records, followed by customer complaints and legal actions related to fraud and dispute handling.

Your Next Steps

  • 1
    Verify any received communications come directly from official healthequity.com contacts.
  • 2
    Monitor accounts regularly for unauthorized activity, given historical data breach risks.
  • 3
    Consider using additional fraud protection services and follow recommended security measures by HealthEquity.
  • 4
    Avoid entering personal/sensitive info on websites mimicking healthequity.com to avoid phishing scams.
  • 5
    Report suspicious transactions promptly to HealthEquity and regulatory authorities.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →