Learn how to verify whether a jail deposit provider is official before sending money — protect your family from scam sites and hidden fees.
How to find someone in jail is often the first crisis a family faces, but the second crisis arrives almost immediately after: figuring out where to send money. The jail commissary deposit process looks simple on the surface, but the ecosystem surrounding it is filled with lookalike websites, third-party collectors, and unofficial payment portals that intercept families at their most vulnerable moment. This guide walks you through a repeatable, step-by-step methodology for confirming that any deposit provider you encounter is genuinely contracted with the facility before you hand over a single dollar.
Why Verification Matters Before You Send Money
Every correctional facility contracts with a specific, authorized provider for phone accounts, commissary deposits, and in some cases tablet services. That contract is exclusive. It means there is one official vendor — and only one — that the facility has approved to collect and transfer funds on behalf of incarcerated individuals. Any other entity collecting money for the same purpose is, at best, an unnecessary middleman charging extra fees, and at worst, an outright scam operation that will keep your payment.
The financial stakes are real. Families navigating a jail commissary deposit under stress are prime targets for lookalike sites that copy official branding, use nearly identical domain names, and charge processing fees that never reach the intended account. Scam-avoidance starts not with skepticism about your loved one's facility, but with skepticism about every website that claims to be the right place to pay.
Understanding why this matters is also practical preparation. If you send money to an unofficial provider, you have limited recourse. Official providers have dispute resolution processes tied to the facility contract. Unofficial ones do not. Getting a refund from an unauthorized payment collector can be extraordinarily difficult, and the facility itself has no obligation to credit funds it never received.
Start With the Facility's Own Website
The cleanest starting point is always the official website of the jail, detention center, or correctional facility where your loved one is held. Most county, state, and federal facilities maintain a public-facing website that includes inmate search tools, visitation policies, and either a direct link to their contracted deposit provider or the provider's name listed in their FAQ.
Look for a domain ending in .gov, .us, or an official county subdomain. Facilities operated by counties often use domains like sheriff.countyname.gov or countynamecounty.gov. These are harder to spoof convincingly than private sites, though they do occasionally have outdated information. When you find the deposit provider's name on the official facility website, write it down exactly as it appears.
If the website lists a phone number for the facility's main line or its inmate services desk, calling that number to confirm the provider is the single fastest verification step available. Ask specifically: "Who is the contracted provider for commissary deposits?" The answer you receive should match what the website states. If those two sources give you different answers, treat that as a red flag and make a second call.
Cross-Reference the Provider Against the Facility's Inmate Services Page
Most large county facilities have a dedicated inmate services page separate from the homepage. This page typically covers visitation scheduling, mail rules, medical care, and financial accounts. The commissary or trust account section of this page will name the authorized provider and, in many cases, include a direct link to that provider's portal.
Click the link from within the official facility website rather than navigating directly to a provider URL you found through a search engine. Bookmark that page for future use. A URL that originates from an official .gov domain and leads to a provider portal is significantly more trustworthy than a URL you discovered through a paid advertisement at the top of a search results page.
Paid advertisements can and do appear above organic search results for searches like "send money to someone in jail" or "jail commissary deposit" at a specific facility. These ads may be placed by legitimate providers, but they may also be placed by lookalike services. Clicking an ad rather than a link from the official facility site introduces risk. The facility's inmate services page removes that risk by doing the linking for you.
Check That the Provider Is Registered to Operate
After identifying the provider by name, your next step is confirming it is a real, registered company. Every legitimate payment services provider operating in the United States must be registered as a money services business with the Financial Crimes Enforcement Network, commonly known as FinCEN, which is a bureau of the U.S. Department of the Treasury. You can search the FinCEN MSB Registrant Search tool at the official Treasury website using the company's legal name or trade name.
If the provider does not appear in that registry, that absence is a serious warning sign. It does not always mean fraud — some providers operate under a parent company's license — but it should prompt you to investigate further before submitting any payment. A legitimate provider will be able to confirm its registration details if you ask.
Many states also require money transmitters to hold a state-level license in addition to the federal registration. Policies about which entities require which licenses vary by state, so confirm requirements with the relevant state financial regulator if you want a full picture. The company's own website should list its licenses prominently in the footer, on an "About" page, or in its terms of service.
Examine the Provider's Website for Official Indicators
Knowing how to check whether a deposit provider is official means learning to read the signals embedded in the provider's website itself. Start with the URL. A legitimate, contracted provider will have a stable, professional domain — not a domain registered within the past few weeks, not a domain that adds words like "official," "real," or "secure" to what appears to be a real provider's name.
Look at the padlock symbol in your browser's address bar. Every legitimate financial services website should use HTTPS with a valid SSL certificate. This is a necessary condition, but not a sufficient one — scam sites can and do obtain SSL certificates. So while HTTPS is required, its presence alone does not confirm legitimacy.
Scroll to the footer of any provider's website. Legitimate providers will list their legal business name, their state of incorporation, and often their FinCEN registration number. They will have a terms of service agreement, a privacy policy, and a refund or dispute policy that are all substantive documents rather than placeholder pages. If any of these are missing, that signals an operation that has not built a compliant infrastructure.
Search for the Provider by Name, Not by Facility
When conducting your own research, search for the provider's exact name, not the facility's name. Search engine results for the provider's name will surface news articles, regulatory actions, and community discussions that reveal whether the company has a history of consumer complaints, fraud allegations, or regulatory penalties.
Government websites, news databases, and consumer protection agency complaint portals are all useful here. Some regional correctional departments maintain lists of approved vendors on their official sites, and cross-referencing the provider's name against such lists adds another layer of confirmation. If a provider's name is associated with unresolved complaints at a state attorney general's office or a federal consumer protection agency, weigh that information carefully.
It is also worth running the provider's domain through a WHOIS lookup, which shows when the domain was registered and who registered it. Domain registration information is publicly available. A provider claiming to have served correctional facilities for years but whose domain was registered recently is inconsistent — and that inconsistency deserves scrutiny.
Verify Through the Facility Directly, a Second Time
Even after completing the steps above, a second direct contact with the facility remains the most bulletproof verification method available to families. Call the facility's inmate services line during business hours and ask two specific questions: the name of the currently contracted deposit provider, and whether there are any other entities authorized to collect funds on behalf of incarcerated individuals at that facility.
Facilities change vendors occasionally. A provider that was legitimate six months ago may have been replaced. The official website may not reflect the change immediately. Calling and asking puts you in direct contact with a human being whose job is to manage exactly this information. Document the call: write down the date, the time, the name of the person you spoke with if they provide it, and the answers they gave.
Some families also find it useful to ask the incarcerated individual directly, during a phone call or visit, whether they have confirmed with other residents which provider is currently being used for commissary. This is not a verification method by itself — residents can be misinformed — but it can provide a consistent signal alongside your other research.
Understand What a Referral Service Does and Doesn't Do
As you research, you will likely encounter services that help families locate incarcerated individuals and then refer them to official providers rather than collecting money themselves. Understanding the role of an information and referral service is important for scam-avoidance, because conflating a referral service with a payment processor is a source of confusion that bad actors exploit.
A legitimate referral service will be transparent about the fact that it does not touch your money. It will direct you to the facility's contracted provider and make clear that your deposit happens on that provider's secure system. It will not ask you to enter payment information on its own platform for commissary purposes.
InMato LLC operates exactly in this space. InMato is an information, search, and referral service that helps families conduct a county jail inmate search, understand which facility holds their loved one, and identify the correct official provider for commissary and phone accounts. InMato never holds or processes user funds — deposits go directly to the official facility provider. The search function is free for every family with no time limit, covering 289 county jail systems across 14 states. InMato Core costs nothing and requires no account to search, which means families can verify provider information without any financial commitment.
Recognize the Warning Signs of an Unofficial Provider
Certain patterns appear consistently across unofficial and predatory deposit sites. Recognizing these patterns can stop a bad transaction before it starts. Providers that advertise fees dramatically lower than the facility's contracted provider should prompt skepticism — in many cases, the official contracted rate is set by the facility, and a lower-fee competitor outside that contract may simply be collecting money without forwarding it.
Sites that require you to create an account with extensive personal information before showing you any provider details are not operating transparently. Legitimate providers need your loved one's name and booking number to direct a deposit — they do not need your Social Security number, your bank login credentials, or answers to security questions unrelated to the transaction.
Pressure tactics are another signal. Sites that display countdown timers suggesting a deposit window is about to close, or that warn your loved one's account will be suspended unless you act immediately, are manufacturing urgency to override your judgment. Official providers do not operate this way. Commissary accounts do not have arbitrary deposit deadlines imposed by the provider.
What Happens When You Catch an Unofficial Provider
If you have already submitted payment to what you now believe is an unofficial or fraudulent provider, take action quickly. Contact your bank or card issuer immediately to report an unauthorized or potentially fraudulent charge and request a dispute or chargeback. The window for disputing a transaction varies depending on your bank and the payment method, so do not delay.
File a complaint with the relevant consumer protection authority. The Federal Trade Commission maintains a complaint portal at reportfraud.ftc.gov. Your state's attorney general consumer protection division typically maintains a similar portal. These complaints contribute to enforcement records even when individual resolution is not guaranteed, and they can prevent the same operation from victimizing other families.
Contact the facility's inmate services line to inform them that a lookalike or unauthorized site may be collecting money from families of their residents. Facilities have an interest in stopping this activity because it damages trust in the entire system and creates operational problems when families blame the facility for missing deposits.
Building a Repeatable Verification Habit
Verification is not a one-time task. Providers change. Contracts expire. Lookalike sites emerge in response to every high-traffic search topic, including jail booking alerts and commissary services. Building a habit of re-verification every time you send money — especially after a transfer or release event — protects your family across the full duration of an incarceration.
Keep a record of the exact URL of the official provider portal you have verified, along with the date you confirmed it with the facility. When you are ready to make your next deposit, compare that saved URL against the one you are being directed to. If they differ, start the verification process over rather than assuming the change is routine.
Families that share provider verification tips with others in similar situations — in community groups, church communities, or support networks — multiply the protective effect of this knowledge. Scam-avoidance is stronger when practiced collectively. If someone in your network has already called the facility and confirmed a provider, that confirmation is worth sharing, along with the date it was obtained.
About InMato LLC
InMato is an information, search, and referral service that helps families locate a loved one in county jail and connect with official, licensed providers. Founded by J.T. Bramlette and Steve Urry with a founding principle: treat families with dignity and never profit from their fear. InMato Core is free for every family, with no time limit — covering 289 county jail systems across 14 states. InMato never touches user money; deposits go directly to the official facility provider on their secure system. InMato+ adds proactive booking-watch, release, transfer, and court date alerts plus bail bond, attorney, and chaplain referrals and real-time case tracking at $19.99/month per loved one, cancel anytime. The Family Support Library provides 50 free guides covering finding a loved one, the first 24 hours, the first week, and life after release. Available in English and Spanish. InMato LLC, a Delaware limited liability company, headquartered in Santa Barbara, California.
Get Started with InMato LLC
Search for your loved one now at inmato.com — free for every family, with no time limit. Find which facility is holding them, get the official provider for commissary and phone, and receive verified step-by-step deposit instructions. No account required to search. Available in English and Spanish.
Originally published at https://www.inmato.com/blog/how-to-check-whether-a-deposit-provider-is-official
Written by InMato
Looking for someone right now?
Search participating county jails for free and connect to the facility’s official, licensed providers — no money ever passes through InMato.