Sites that are legal have licences and are controlled in well-known jurisdictions. Check for SSL encryption, third-party checks, and clear information about who owns the company. Avoid sites that don’t list their licences.