No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Is figma.com legit or a scam?
Official Figma design platform on a 27-year-old domain with clean scans and strong professional reviews.
Analysis Summary
AI Security Analysis
The page content, title, and product descriptions match the legitimate Figma collaborative design tool exactly. The domain is over 27 years old with valid SSL and zero flags from our antivirus network or blocklists. Our research found professional praise on review sites like PCMag and Gartner alongside some user complaints about billing practices. No evidence indicates the site itself is fraudulent or a clone. Multiple reports actually confirm phishing attempts that misuse links hosted on the real Figma platform rather than the site being malicious.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for figma.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain figma.com has age of 9917 days per query data.
- Page title and description match official Figma collaborative design platform.
- Multiple forum posts report phishing attacks using links hosted on figma.com files or decks.
- Billing complaints on Figma forums and LinkedIn describe unauthorized charges and shady practices.
- Positive professional reviews on PCMag (4.5/5), Gartner (4.6/5), and others praise collaboration features.
- No evidence of figma.com itself being a scam or typosquat; it is the legitimate brand site.
- Reports of fake Figma-like sites appearing in Google search results (e.g., figmsjobs.com).
- Trustpilotopen
"Overpriced and clunky . The interface is overly complicated for what it does, and the price tag doesn't justify the features."
- Figma Forumopen
"This is a complete scam and they are now attempting to refuse to refund me for all these bills which they LIED ABOUT. BBB, here I come."
- LinkedInopen
"FIGMA is a scam. The product is good, but the way they bill is shady and deceitful."
- Figma Forumopen
"Our company received a mass email today with a hyperlink to a page on figma.com that tried to trick our employees into clicking another hyperlink to redirect them to a scam/phishing website."
- PCMagopen
"Figma is a potent tool for teams and individuals who want to explore ideas, get feedback, build prototypes, and streamline the development of standardized assets within corporate design systems."
- Gartner Peer Insightsopen
"Figma is great for wireframe design . It makes it much easier for our teams to mock up ideas and make improvements to our app."
- Mediumopen
"My 30 days of trialling Figma was definitely worth the time I spent. I now use Figma for all my projects."
- Capterraopen
"Overall, my experience with Figma has been very positive . It has become an essential tool in my design process."
Our research found four scam-related mentions on independent review aggregator, Figma forums, and LinkedIn, mostly about billing disputes or phishing attempts that used links on figma.com. Four positive reviews appeared on PCMag, Gartner Peer Insights, Medium, and Capterra praising the tool's usability. No business registration details surfaced beyond the known Figma Inc. name, and the site is confirmed as the legitimate brand rather than a clone.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
- Links to 11 social profiles.
Domain & Encryption
Redirect Chain
- 1301http://figma.com/
- 2301https://figma.com/
- 3200https://www.figma.com/cross-domain
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on figma.com and not a lookalike like f-igma.com.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.
- Our automated security review found no threat indicators on figma.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- figma.com passed our automated security checks with a trust score of 86/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. figma.com presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 106 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- figma.com is 27.2 years old, registered on 4/10/1999 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report figma.com as clean.
- No. figma.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- figma.com resolves to an IP operated by Amazon.com, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.