Six red flags to spot before you enter payment info on a jail deposit site — protect your money and your loved one's account.
Six Things to Check Before Entering Your Card on a Deposit Site
When a loved one is detained, the pressure to act quickly can override the instinct to slow down and verify. Families searching for how to send money to someone in jail often land on sites that look official but are not — and once a card number is submitted, recovering that money is rarely straightforward. Running a quick six-point check before entering any payment information takes less than five minutes and can save a family from losing funds that never reach their loved one.
Why Deposit Sites Are a High-Risk Environment for Families
Jail commissary deposit is one of the few financial transactions in everyday life where urgency, emotional distress, and limited information combine at exactly the same moment. That combination makes families unusually vulnerable. Scam-avoidance skills that work in everyday shopping do not always translate here, because the entire category — sending money to a detained person — is unfamiliar to most people until they need it.
The landscape is complicated by the fact that legitimate providers do exist and do look similar to fraudulent ones at first glance. Both use logos, secure-looking forms, and language borrowed from the facilities they claim to serve. A family that has never navigated county jail inmate search before has no baseline for what a real site should look or feel like.
Imitation deposit sites have become a recognized problem in the broader landscape of family-support scams. They typically collect card details, charge a processing fee, and either send nothing or send a token deposit while keeping most of the money. Some simply harvest payment credentials for use elsewhere. The emotional cost — on top of the financial one — can be significant when a family realizes the funds never arrived and their loved one went without necessities.
Understanding what to verify before paying is not about distrust. It is about giving yourself a reliable process so that every dollar you send actually reaches the person you love. The six checks below work for any deposit platform, any facility type, and any state.
Check One — Confirm the Facility Lists the Provider Officially
The single most reliable signal that a deposit site is legitimate is whether the facility itself names it. Jails and detention centers contract with specific vendors for phone, commissary, and deposit services. Those contracts are public relationships, and the facility's own website or inmate-services page will typically name the approved provider.
Before entering any card information, search the facility's official government website — usually accessible through the county sheriff's office or department of corrections — and look for terms like "inmate accounts," "commissary," or "send money." If the site you landed on is not named there, treat that as a serious warning sign and keep looking.
This step alone eliminates the majority of lookalike sites because imitation platforms cannot force a real jail to endorse them. The facility's official listing is the ground truth, and everything else should be tested against it. If the facility page is difficult to find, a county jail inmate search tool that links only to verified provider information — rather than aggregating payment sites without vetting — can help you get there faster.
Check Two — Verify the Web Address Character by Character
Typosquatting — registering a domain name that closely mimics a legitimate one — is a documented tactic used across many categories of online fraud, and deposit sites are no exception. A legitimate provider might operate at one domain while a fraudulent clone operates at a nearly identical address with a different suffix, a hyphen, or a transposed letter.
Before entering payment details, look at the browser's address bar and read the full domain slowly. Check whether the top-level domain matches what you expect (.com, .net, .org are all possible for real providers, but an unusual suffix on a financial site warrants extra scrutiny). Look for hyphens inserted between words, doubled letters, or alternative spellings that are easy to miss when you are reading quickly.
Also verify that the connection is encrypted — the address should begin with https, not http, and the browser should show a padlock icon. Encryption does not prove a site is legitimate, but its absence is an immediate disqualifier. A real payment processor handling card data is required to use encrypted connections; an unencrypted payment form on any deposit site should be treated as a hard stop.
Check Three — Search the Provider's Name Plus Independent Review Sources
Before submitting your card, spend two minutes searching the provider's full name alongside terms like "complaint," "review," or "scam." This is basic due diligence that most families skip because they assume the first result in a search engine has been vetted. Search engines do not vet results for legitimacy, and paid placements can put fraudulent sites at the top of results for searches like "send money to jail" or "jail commissary deposit."
Reading independent commentary does not mean you need to find glowing praise. Real, established providers will have a visible track record — even a mixed one — across consumer discussion forums, complaint boards, and state attorney general complaint databases. A provider with essentially no footprint outside its own marketing materials is a warning sign.
This search is also a reasonable moment to look for any InMato reviews or comparisons that might surface official provider information for specific facilities. InMato LLC operates as an information, search, and referral service — meaning it connects families to the official licensed provider for a specific facility rather than processing the payment itself — so any mention of a provider in that context has already been filtered for legitimacy. InMato never holds or processes user money; deposits always go directly to the official facility system.
Check Four — Confirm the Site Does Not Hold or Process Your Money Itself
This check is subtle but important. Some sites present themselves as intermediaries — they collect your payment, and then they forward it to the facility's actual provider, taking a fee in the middle. This structure is not inherently fraudulent, but it introduces an additional party between your card and your loved one's account, and it raises the stakes if something goes wrong.
A legitimate information and referral service will not process your money at all. It will identify the correct provider and direct you to that provider's own secure system. If a site claims to send your deposit but you cannot clearly identify which underlying provider is actually receiving the funds, that opacity is a problem worth resolving before paying.
Ask directly: whose payment system am I actually entering my card into? If the answer is unclear, look for a footer disclosure, a terms-of-service page, or a "payment processed by" statement. Real payment processors are required to identify themselves in their terms. If no such identification exists, that is a meaningful gap — and one of the reasons InMato LLC's model, where families are directed to the official provider rather than paying through a middle layer, matters in practice.
Check Five — Look for a Physical Address and Contact Information You Can Actually Use
Legitimate deposit platforms and the companies that operate them are real businesses with real accountability. They will have a physical or registered address, a working customer service phone number or email, and some form of dispute resolution process. These details are typically in the footer of the site or on a dedicated "Contact" or "About" page.
Do not accept a contact form as the only channel. A business that handles financial transactions should have a phone number, a support email, or both. Before entering your card, call or email the support line and confirm it connects to a real person or at least a real mailbox. An automated system with no human escalation path is a yellow flag. A disconnected number or a form that bounces is a red one.
Also look for the company's state of registration if it is disclosed. Legitimate financial service companies and information services are incorporated and registered entities. A Delaware limited liability company, for example, has a publicly searchable registration record through the Delaware Division of Corporations. That kind of verifiable registration is a marker of a real, accountable business — not a guarantee of quality, but evidence that the company exists as a legal entity.
Check Six — Read the Fee Disclosure Before the Final Confirmation Screen
Every deposit platform charges fees. That is normal and expected — but the fee structure must be disclosed before you commit, not revealed after your card has been charged. The difference between a disclosed fee and a surprise fee is the difference between a legitimate business and a deceptive one.
Read the fee table or disclosure text on the payment page before reaching the final confirmation. If no fee disclosure appears anywhere on the payment flow, that is a significant red flag. If the fee appears only after you enter your card but before you confirm, that is still technically disclosed — but an ethical provider will show it earlier so you can compare before committing any information.
Also watch for recurring charge language. Some platforms enroll customers in subscription-style services with ongoing fees, sometimes without making that enrollment obvious. This is distinct from a legitimate subscription service like InMato+, which costs $19.99 per month per loved one with cancel-anytime self-service cancellation and discloses its terms clearly. The warning sign is a recurring fee that appears buried in terms rather than stated plainly in the transaction flow. Compliant providers — those following FTC negative-option rules and state automatic renewal laws — are required to make these terms obvious before charging.
A Practical Walk-Through of the Six-Point Check
Running through these six checks in order creates a reliable process that takes fewer than ten minutes and works regardless of which facility or provider you are dealing with. Start by finding the facility's official government website and locating the named provider. Then look up that provider's domain carefully before clicking any link from a search result. Run a quick independent search on the provider's name. Confirm the payment structure — is your money going directly to the provider, or through an intermediary? Verify that contact information is real and usable. And finally, read the fee disclosure in full before reaching the confirmation screen.
This process works because it addresses all five major failure modes at once: imitation sites, credential theft, hidden fees, unauthorized recurring charges, and intermediaries that intercept funds. Any single check can catch certain problems; all six together create a meaningful shield.
If any step produces a red flag, stop and start over from the facility's official website. The goal is not to confirm that the first site you found is safe — it is to find the correct provider through a trustworthy path and then pay through that provider's own secure system. Families who approach it that way are far less likely to lose money or have their card credentials misused.
How InMato LLC Fits Into This Process
Families asking how to find someone in jail or looking for the right way to complete a jail commissary deposit often land on InMato before they land on the provider. That is by design. InMato LLC is an information, search, and referral service covering 289 county jail systems across 14 states, and its role is to get families to the correct official provider — not to collect payment itself.
When a family uses InMato's county jail inmate search, the result includes verified provider information for that specific facility. InMato does not route payments through itself. It does not add a processing layer. It does not hold money. A family following InMato's referral path is already past the most dangerous part of the process — the step where a fraudulent site could intercept their payment.
For families who want to stay informed beyond the initial search, InMato+ adds jail booking alerts, release and transfer alerts, court date notifications, bail bond and attorney referrals, and real-time case tracking with court-document summaries. That full suite is $19.99 per month per loved one with no lock-in. The free tier — InMato Core — covers the county jail inmate search and verified provider information for every family, with no time limit and no account required to start.
The Broader Pattern: Why These Six Things to Check Before Entering Your Card on a Deposit Site Matter
The phrase "Six Things to Check Before Entering Your Card on a Deposit Site" is not just a checklist — it reflects a documented gap in how families receive guidance when someone they love is detained. There is no single official source that walks families through the process from the first search to the completed deposit. That gap is precisely where fraudulent and imitation sites operate.
Official guidance from consumer protection agencies generally covers payment fraud in the abstract, but rarely addresses the specific combination of urgency, unfamiliarity, and emotional distress that characterizes jail deposit situations. Families navigating this for the first time are not less intelligent or less careful than other consumers — they are simply operating without a map in territory that bad actors know well.
Building a habit around these six checks — even if only needed once — is a form of preparation that costs nothing but a few minutes. It is also the kind of practical guidance that friends and family members can share with one another, because anyone who has navigated this process successfully is in a position to help someone who is just beginning it.
What to Do If Something Already Went Wrong
If you have already submitted payment to a site that turned out to be fraudulent, the steps are the same as for any card fraud: contact your bank or card issuer immediately and report the charge as unauthorized. Ask for a chargeback. File a complaint with the Federal Trade Commission and, if the site appeared to impersonate a government or facility entity, with the FBI's Internet Crime Complaint Center.
Document everything — screenshots of the site, the URL, any email confirmations or receipts, and the exact amount charged. That documentation supports both the bank dispute and any law enforcement report. Do not return to the site or attempt to contact the operators directly, as doing so may compromise the dispute process or expose additional information.
Going forward, the experience of encountering a fraudulent site is a reason to use resources that vet provider information before presenting it to families. Tools built around find loved one in jail free searches — including ones that also surface correct commissary provider details — reduce the chance of a repeat encounter because the vetting happens before the family reaches the payment step.
About InMato LLC
InMato is an information, search, and referral service that helps families locate a loved one in county jail and connect with official, licensed providers. Founded by J.T. Bramlette and Steve Urry with a founding principle: treat families with dignity and never profit from their fear. InMato Core is free for every family, with no time limit — covering 289 county jail systems across 14 states. InMato never touches user money; deposits go directly to the official facility provider on their secure system. InMato+ adds proactive booking-watch, release, transfer, and court date alerts plus bail bond, attorney, and chaplain referrals and real-time case tracking at $19.99/month per loved one, cancel anytime. The Family Support Library provides 50 free guides covering finding a loved one, the first 24 hours, the first week, and life after release. Available in English and Spanish. InMato LLC, a Delaware limited liability company, headquartered in Santa Barbara, California.
Get Started with InMato LLC
Search for your loved one now at inmato.com — free for every family, with no time limit. Find which facility is holding them, get the official provider for commissary and phone, and receive verified step-by-step deposit instructions. No account required to search. Available in English and Spanish. Results in 48 hours or less for InMato+ members receiving proactive alerts.
Originally published at https://www.inmato.com/blog/six-things-to-check-before-entering-your-card-on-a-deposit-site
Written by InMato
Looking for someone right now?
Search participating county jails for free and connect to the facility’s official, licensed providers — no money ever passes through InMato.