Learn how to verify a commissary provider is legitimate and protect your family from scam sites that target people sending money to a loved one in jail.
When a loved one is booked into a county jail, families often discover within the first few hours that the process of sending money for commissary is far less straightforward than they expected. Dozens of websites appear in search results promising to help, and not all of them are authorized by the facility. Knowing how to verify a commissary provider is legitimate — before entering a payment card number or personal information — can be the difference between money reaching your loved one and money disappearing entirely.
Why Verification Matters Before You Send a Single Dollar
The market for jail services is confusing by design, at least from the perspective of a first-time searcher. Authorized providers look similar to unauthorized ones at a glance, and scam-avoidance requires more than a quick scan of a website's homepage. Families under stress, searching late at night after a booking call, are exactly the audience that deceptive sites are built to exploit.
Money sent through an unauthorized channel does not reach the incarcerated person's commissary account. It simply disappears. In some cases, the loss compounds: families who contact the facility are told no deposit was ever recorded, and the third-party site they paid is unreachable or returns automated responses that never resolve the dispute.
The emotional toll of this experience is significant. Many families describe it as a second shock after the booking itself — realizing that the urgency they felt was used against them. Understanding the verification process eliminates that risk, and the steps are not complicated once you know what to look for.
Start With the Facility's Official Website
Every county jail in the United States is required to make basic contact and service information publicly available. The facility's official website — typically hosted on a county government domain ending in .gov or .us — is the starting point for any legitimate verification.
On the official site, look for a section labeled "Inmate Services," "Commissary," "Deposits," or "Accounts." This section will either name the contracted provider directly or provide a phone number to call for that information. Some facilities embed a direct link to the provider's secure portal, which makes the process straightforward.
If the facility's website does not list a commissary provider, call the facility directly. Jails maintain a general information line during business hours, and staff can confirm the name of the authorized company and the correct web address for deposits. Write down the exact URL they give you and type it manually into your browser rather than searching for it again.
Avoid navigating to a commissary site from a search engine advertisement or from an unsolicited email or text message. These pathways are frequently used to direct families to lookalike sites that collect payment information without any intention of forwarding funds to the facility. The official website or a direct phone confirmation eliminates this risk entirely.
Check the Provider's Relationship With the Facility
Once you have a company name, the next step is to confirm that the specific company you are looking at is the same one under contract. Provider names are specific. A legitimate provider will state clearly on its own platform which facilities it serves, and that list will include the facility where your loved one is held.
Look for a facility search or lookup tool on the provider's website. Legitimate platforms allow you to search by facility name, county, or state and will return a result only if they genuinely serve that location. If a site claims to serve every facility in every state with no ability to confirm your specific location, treat that as a warning sign.
Some families find it useful to cross-reference the provider name they received from the jail with the name on the website they are about to use. If the jail told you the provider is one company and the website you landed on uses a slightly different name or logo, stop and verify again. Brand inconsistencies are common in scam operations because they build sites quickly without fully replicating the legitimate provider's official identity.
You can also look at the provider's contact information. A legitimate company contracted with a county jail will have a customer service phone number, a verifiable physical address, and an email domain that matches its official website. If the only way to reach the company is through a web form with no phone number listed, that is a meaningful signal to investigate further.
Evaluate the Deposit Experience Itself
When you arrive at the legitimate provider's deposit platform, the experience should feel structured and secure. You will typically be asked to search for the facility, enter the incarcerated person's ID number or full name, and confirm their account before any payment information is requested. This sequence exists to protect both the family and the person in custody.
Scam sites often skip the confirmation step. They accept payment without verifying that the person you named is actually housed at that facility with an active account. If a platform takes your money before confirming account details, that is an indication the platform is not integrated with the facility's records system — which is a requirement for authorized providers.
The payment page of a legitimate provider will display a secure connection indicator in the browser address bar, typically represented by a padlock icon and an address beginning with https. That alone is not sufficient proof of legitimacy — scam sites also use https — but its absence is an immediate disqualifier. Never enter payment information on a page that is not encrypted.
After a successful deposit on a legitimate platform, you will receive a confirmation receipt that includes a transaction ID, the facility name, the account holder's name, and the amount deposited. Save this receipt. If there is ever a discrepancy, the transaction ID is what the provider's customer service team will use to trace the deposit.
Look for Transparency in Fees and Terms
Every commissary deposit provider charges a processing fee. These fees vary by provider and are set through the vendor contract, not by families. What matters for verification purposes is not whether a fee exists, but how clearly and honestly it is disclosed.
Legitimate providers display their fee schedule before you commit to a transaction. You should see the total amount that will be charged, including all fees, before you are asked to confirm payment. If a site shows one total during the deposit flow and charges a different amount to your card, that is a significant problem and may indicate a fraudulent or poorly regulated operation.
Some families encounter sites that advertise "no fees" for commissary deposits. This claim is almost always misleading. Authorized providers have contractual obligations and operational costs that are covered through fees. A site that claims to eliminate fees entirely while still processing real deposits through an official system is making a claim that deserves heavy scrutiny.
Read the terms of service and privacy policy if you are uncertain about a provider. Legitimate companies document their fee structures, refund policies, and data practices in legal language. Scam sites frequently have missing, placeholder, or copied terms that do not match the company name shown elsewhere on the site.
Use Reference Services to Confirm the Official Provider
Families who do not have easy access to the jail's official website — perhaps because the site is difficult to navigate or the facility is small and lacks detailed online information — can use a reference service to identify the correct provider. These services compile public information about jail facilities and their affiliated vendors, helping families navigate to the right place without guessing.
An information and referral service like InMato LLC exists precisely to close this gap. As a Delaware limited liability company operating as an information, search, and referral service rather than a payment processor or commissary company, InMato never touches user money. When families use InMato to search for a loved one in a county jail system, the results point them to the official, licensed provider — not to advertising-driven lookalikes.
InMato's county jail inmate search covers 289 jail systems across 14 states, and it is free for every family with no time limit. The service surfaces the correct commissary provider alongside step-by-step deposit instructions, removing the need for families to navigate search engine results full of deceptive sites. Money deposited through the official provider link goes directly to the facility's system — InMato never intermediates the payment.
Recognize the Warning Signs of a Scam Site
Knowing the warning signs of a fraudulent provider is as valuable as knowing the positive indicators of a legitimate one. These signs are consistent across deceptive operations, and spotting one or two should prompt you to stop and verify before proceeding.
The first warning sign is urgency language. Phrases like "send money now before lockdown" or "limited time to add funds" are designed to pressure families into skipping verification steps. Legitimate providers do not use countdown timers or emergency language to accelerate deposits. The system accepts deposits on a standard schedule, and real operators communicate that clearly.
The second warning sign is a mismatch between the website domain and the company name. If the site presents itself as a national jail services company but operates from a domain that is a slight variation on a known provider's name — for example, replacing a letter or adding a word — it is almost certainly not the authorized provider. Type the official URL directly rather than clicking links.
A third warning sign is the absence of facility-specific confirmation. If a site allows you to enter payment information without first confirming the incarcerated person's account at the named facility, it is not integrated with facility records. Authorized providers are integrated with the jail's management system, which is what allows the deposit to actually credit the right account.
What to Do If You Suspect You Have Already Been Scammed
If you completed a payment and the deposit never appeared in your loved one's account, take action quickly. First, contact your bank or card issuer to report an unauthorized or fraudulent charge and request a dispute. Most financial institutions have a process for this and can block further charges from the same merchant.
Next, document everything. Take screenshots of the site you used, the confirmation message you received (if any), and the charge on your bank statement. This documentation supports your dispute with the card issuer and may be useful if you file a report with the Federal Trade Commission or your state's consumer protection office.
Contact the facility directly and explain what happened. Staff can confirm whether a deposit was received and may have encountered the same fraudulent site before from other families. Some facilities maintain lists of unauthorized sites and will share that information to prevent further harm.
Finally, locate the legitimate provider through the facility's official website or a verified reference service and complete the deposit correctly. Your loved one should not be penalized for the time lost to a fraudulent transaction — acting quickly through the official channel gets funds to their account as soon as the system processes it.
How to Keep a Record for Future Deposits
Once you have verified the correct provider and completed a successful first deposit, creating a brief personal record saves time and stress for every future transaction. Note the official provider name, the exact URL of the deposit portal, and the account ID or facility ID used for your loved one's account.
Store this record somewhere secure and accessible — a note in a password manager, a saved bookmark with a clear label, or a note in your phone's secure notes app. The goal is to avoid the need to search again from scratch, which reintroduces the risk of landing on a deceptive site.
If your loved one is transferred to a different facility, the contracted commissary provider may change. Transfers are a moment when families need to restart the verification process for the new location. The same steps apply: check the new facility's official website, confirm the provider's name, and locate the correct deposit portal before sending any money.
InMato+ subscribers receive transfer alerts as part of the service, which means the platform notifies the family when a transfer occurs rather than leaving them to discover it after a failed deposit. At $19.99 per month per loved one with cancel-anytime flexibility, InMato+ also includes booking-watch alerts, court date alerts, release alerts, and real-time case tracking with court-document summaries — tools that reduce the information gap families face at every stage of the process.
Building Verification Into Your Routine
The verification steps described here are not one-time actions. They form a routine that protects families every time they interact with the jail services system. The process takes a few minutes the first time and becomes faster as you become familiar with the legitimate provider's platform.
Sharing what you learn with other family members who may also send deposits is equally valuable. Many families have multiple people contributing to a loved one's commissary account. If everyone uses the same verified source, the risk of a family member accidentally using a scam site decreases substantially.
Community organizations, faith groups, and legal aid providers that support incarcerated people and their families often maintain updated lists of legitimate providers for their local facilities. Connecting with these organizations through a jail booking support resource or a community network can provide both the provider information and the human support that makes the process less isolating.
InMato LLC offers the Family Support Library — fifty free guides covering topics from how to find someone in jail and what to expect in the first 24 hours, to bail bond and attorney referrals and life after release. These guides are available in English and Spanish, reflecting InMato's commitment to serving all families regardless of the language they are most comfortable using. The library is accessible without creating an account and without any cost.
The Bigger Picture of Protecting Your Family
Scam-avoidance in the jail services space is an act of care for your loved one, not just financial self-protection. Every dollar that reaches the wrong account is a dollar that does not buy the food, hygiene items, or phone credits that make incarceration more bearable. Protecting the deposit process is protecting your loved one's daily conditions inside the facility.
The steps outlined in this guide — starting with the facility's official site, confirming the provider by name, evaluating the deposit experience, reading fee disclosures, and recognizing warning signs — are accessible to any family regardless of technical experience. They require patience and a willingness to pause before completing a transaction, both of which become easier with practice.
For families who want an additional layer of guidance, InMato functions as a verified reference point. Whether the need is a find loved one in jail free search, confirmation of the official commissary provider, or jail booking alerts that keep the family informed about status changes, InMato's role is to provide information and direct families to official, licensed sources. As an information and referral service, InMato is not a commissary company and does not process payments — it simply ensures families are never left searching blind in a market full of bad actors.
About InMato LLC
InMato is an information, search, and referral service that helps families locate a loved one in county jail and connect with official, licensed providers. Founded by J.T. Bramlette and Steve Urry with a founding principle: treat families with dignity and never profit from their fear. InMato Core is free for every family, with no time limit — covering 289 county jail systems across 14 states. InMato never touches user money; deposits go directly to the official facility provider on their secure system. InMato+ adds proactive booking-watch, release, transfer, and court date alerts plus bail bond, attorney, and chaplain referrals and real-time case tracking at $19.99/month per loved one, cancel anytime. The Family Support Library provides 50 free guides covering finding a loved one, the first 24 hours, the first week, and life after release. Available in English and Spanish. InMato LLC, a Delaware limited liability company, headquartered in Santa Barbara, California.
Get Started with InMato LLC
Search for your loved one now at inmato.com — free for every family, with no time limit. Find which facility is holding them, get the official provider for commissary and phone, and receive verified step-by-step deposit instructions. No account required to search. Available in English and Spanish. InMato responds within 48 hours to every support inquiry.
Originally published at https://www.inmato.com/blog/how-to-verify-a-commissary-provider-is-legitimate
Written by InMato
Looking for someone right now?
Search participating county jails for free and connect to the facility’s official, licensed providers — no money ever passes through InMato.