I agree that electronic deception is a real risk, though I tried to cover this briefly with "on a well-known domain name." To be more specific, if the site isn't a name-brand PWM, brokerage, or custodian bank domain (examples: ubs.com, vanguard.com, fidelity.com), find out why. I agree that a site is easy to put up, but getting it on a domain name visited by hundreds of thousands or millions of people is not.

(And yes, a few tiny PWM firms do use their own Web sites, and you should be much more skeptical of the data you're getting from a 6-employee firm's site). Get access to your custodial account at a name-brand firm's site, or change asset managers.)