Look out for a trust seal such as Norton, RapidSSL,TRUSTe, GeoTrust, digicert, GoDaddy, Paypal or McAfee. You'll sometimes see details about the site's certification to prove it's legit.