No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Is healthequity.com legit or a scam?
Official 24-year-old HealthEquity corporate site with clean scans, though the company itself warns about phishing clones and recent data breach.
Analysis Summary
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual similarities noted — cleared by the overall checks
Our vision model noted some visual similarity to a known brand, but the domain, security records, and reputation checks confirm this is the legitimate site — so this is shown for transparency, not as a red flag.
What our vision model saw
1 signalScreenshot incomplete — site may be slow to render
Intelligence
The domain registered in March 2002 and belongs to a publicly traded Delaware corporation with headquarters in Utah. Zero engines flagged the page and the hosting IP shows no abuse history. The company maintains an active protect page warning members about fake sites and phishing emails, confirming it is the real operator. Independent records show BBB accreditation and a NASDAQ listing. Complaints exist around customer service and a 2024 data breach, but these relate to the legitimate business rather than a fraudulent site.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for healthequity.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain healthequity.com registered 2002-03-19; company founded/incorporated 2002, 24+ years operating
- HealthEquity, Inc. is a publicly traded (NASDAQ: HQY) Delaware corporation with HQ in Draper, UT; offers HSAs, FSAs and employee benefits
- BBB Accredited with A+ rating since 2016; 915 complaints filed in last 3 years (330-332 closed in last 12 months)
- Company has issued multiple public warnings about phishing emails and fake websites impersonating healthequity.com (e.g., 2024 incidents reported by universities and official site)
- Data breach disclosed: unauthorized access to accounts in late 2024 affecting personal and protected health information (notices filed with state AGs; ~4.3M potentially impacted per reports)
- Trustpilot and BBB customer reviews frequently cite poor website/app usability, login issues (e.g., passkey problems), and customer service complaints
- No evidence of the domain itself being a scam or clone; it is the legitimate corporate site with active fraud prevention pages
- HealthEquity official siteopen
"HealthEquity has become aware of criminal efforts to lure members to fake websites impersonating HealthEquity. These fake websites are often accessed through phishing emails or fictitious search engine ads."
- HealthEquity official site (protect page)open
"Links that look modified or unusual (i.e. healthequ1ty.com)"
- Penn State HRopen
"An email sent to Penn State employees starting Monday, 01/08/2024, with subject line “Important information About Your Health Equity Account” is a phishing email... the link in the email does not go to healthequity.com."
- Reddit r/Scamsopen
"HealthEquity had a data breach earlier this year. I wasn't notified about it, but learned about it after almost being scammed."
- Reddit r/Scamsopen
"HealthEquity scam for 2nd time. A bunch of people were scammed out of money in their Heath Savings account with My Health Equity"
- BBBopen
"HealthEquity, Inc. is BBB Accredited. BBB Rating A+"
- HealthEquity site (app ratings)open
"4.5 stars (Apple App Store rating as of April 2025, with 11.8K ratings) for HealthEquity App; 4.7 stars for EZ Receipts app"
- Glassdoor via IR siteopen
"HealthEquity Recognized by Glassdoor as a Top U.S. Workplace for 2024"
Incorporated September 18, 2002 as Delaware corporation (EIN 52-2383166); principal office 15 W. Scenic Pointe Dr., Ste. 100, Draper, Utah 84020; publicly traded NASDAQ: HQY; 24+ years in business per BBB
Our research found five mentions of scam activity, all describing phishing emails and fake websites that impersonate HealthEquity rather than the real domain. Reddit users reported attempted scams after a company data breach. Positive coverage includes BBB A+ accreditation and Glassdoor recognition as a top workplace. The company itself publishes warnings about modified links and phishing attempts.
Domain Timeline
- Mar 19, 2002Domain registered
First appeared in WHOIS records — 24 years old today.
- Jul 9, 2026Latest security review — Reviewed as safe
This scan re-ran every check and found no active threat signals.
healthequity.com has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.
Threat Detection
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Technical Details
domain · encryption · redirects · server reputation · referencedDomain & Encryption
Server Reputation
What to do
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on healthequity.com and not a lookalike like h-ealthequity.com.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Final Verdict
healthequity.com is the legitimate corporate site for HealthEquity, Inc., a publicly traded Delaware company offering HSAs and employee benefits. The domain is 24 years old with clean scans and active fraud warnings on its own protect page. Users should still verify links before entering login details.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on healthequity.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- healthequity.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. healthequity.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 8 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- healthequity.com is 24.3 years old, registered on 3/19/2002 through Cloudflare, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report healthequity.com as clean.
- No. healthequity.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- healthequity.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. healthequity.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.