Is sticpay.com safe?
http://sticpay.com/
Checked on
How we checked
Coverage: strong · 3 of 4 applicable core capabilities
- Antivirus (61 of 92 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
STICPAY is a long-running Costa Rica-registered e-wallet whose own terms disclaim liability for lost funds while users report withdrawals stalled for weeks or months.
STICPAY presents itself as an online payment wallet operated by Extimit LTD, a company incorporated in Costa Rica under Registration No. 3-102-945230, offering LOGIN and SIGN UP entry points and promoting affiliated STICPLAY, STIC CASHBACK and STIC CARD services. The domain is roughly ten years old, uses a valid encrypted connection, carries no browser threat feed warning, and lists a contact address on its own domain — all genuine positives. Against that, four independent review sources describe withdrawal requests that were delayed for weeks or months, with one reviewer saying funds were released only after a complaint to a financial regulator, and the site's own terms state the company will not be liable for loss of funds due to system malfunction, unauthorized access, theft or third-party partners. No malware or phishing behaviour was observed on the page itself, so this is an operator-and-customer-risk finding rather than a technical threat.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 52/100
Moderate Risk covers scores 45–69. 4 findings pulled the score down; 3 pushed it up.
What pulled the score down
- Moderate3 independent sources carry complaints or warnings about this site, including: "I submitted a withdrawal request from my STICPAY wallet on 31.03. 2025, and to this day (over 2 weeks later), I have still not received my money (over $2500…"
- Moderate3 independent sources carry complaints or warnings about this site, including: "For 5 months, Sticpay showed horrible communication and a total lack of transparency, refusing to inform me where my money was. They only finally released my…"
- Moderate3 independent sources carry complaints or warnings about this site, including: "And since I didnt have 100 USD to withdraw ... , both times I lost fees and couldn't get the withdrawal. On the page an ... more than 20% had been charged as…"
- Moderate1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
What pushed the score up
- SupportsThe registrable domain is 3,679 days old, which is inconsistent with a throwaway scam domain.
- SupportsThe browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection.
- SupportsThe site publishes a contact address on its own domain (account@sticpay.com).
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
STICPAY presents itself as an online payment wallet operated by Extimit LTD, a company incorporated in Costa Rica under Registration No. 3-102-945230, offering LOGIN and SIGN UP entry points and promoting affiliated STICPLAY, STIC CASHBACK and STIC CARD services. The domain is roughly ten years old, uses a valid encrypted connection, carries no browser threat feed warning, and lists a contact address on its own domain — all genuine positives. Against that, four independent review sources describe withdrawal requests that were delayed for weeks or months, with one reviewer saying funds were released only after a complaint to a financial regulator, and the site's own terms state the company will not be liable for loss of funds due to system malfunction, unauthorized access, theft or third-party partners. No malware or phishing behaviour was observed on the page itself, so this is an operator-and-customer-risk finding rather than a technical threat.
Withdrawal complaints and a liability disclaimer in the site's own terms
Four separate review sources describe money that did not arrive when requested. One reviewer says a withdrawal submitted on 31 March 2025 for over $2,500 USD had still not been received more than two weeks later. Another says that over five months the company gave poor communication and refused to say where the funds were, and that the money was released only after an official complaint was filed with the Labuan Financial Services Authority. A third describes losing fees on two failed withdrawal attempts and being charged more than 20% in fees. A fourth simply calls the operation scammers and liars. These are user-reported accounts, not verified case files, but they are consistent across independent platforms.
The site's own terms reinforce the concern rather than resolve it. Clause 1.23 states that the System and Company will not be liable for loss of funds by the Customer due to system malfunction, unauthorized access, theft, force majeure, or any special, indirect, incidental or consequential damages connected with the actions or inaction of third parties such as STICPAY certified Partners. In plain terms, the operator disclaims responsibility for exactly the scenarios a wallet user would most want covered.
Clean technical checks do not offset operator risk
Nothing on the page behaves like malware. The browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the only antivirus note is a single stale 'suspicious' mark from one engine in a saved observation — real but old, and not corroborated by anything else in the evidence. There is no download, no forced redirect, no credential-harvesting form and no fake alert.
The positives that do exist are real but limited: the registrable domain is 3,679 days old, and the site publishes a contact address on its own domain (account@sticpay.com). A long-lived domain and an own-domain mailbox are meaningful counterweights to a throwaway scam site, and they are why this is not scored in the High Risk band. They do not, however, answer the withdrawal complaints or the liability clause, because a decade-old domain can still run a service that stalls payouts.
What the site actually is and how a visitor reaches it
The site defines 'STICPAY' as Extimit LTD (Company Registration No. 3-102-945230), a company incorporated in Costa Rica, and repeats that registration number in its legal text. The primary calls to action are a LOGIN button and a SIGN UP button, which is the standard entry pattern for an e-wallet: a visitor registers an account, funds it, and then uses it to move money.
The site also states that it acts as an affiliate for STICPLAY, STIC CASHBACK and STIC CARD services, and links out to sticcashback.com as well as to Apple's App Store and Google Play for its mobile apps. Those outbound links are ordinary product promotion rather than a hidden monetisation funnel, but they do mean a visitor's money and account activity can span several related services under the same operator.
Why the score is 52
3 independent sources carry complaints or warnings about this site, including: "I submitted a withdrawal request from my STICPAY wallet on 31.03. 2025, and to this day (over 2 weeks later), I have still not received my money (over $2500…". Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 92
detectionsSaved analysis from October 2, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
All 92 engine results
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Clean
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- alphaMountain.aiFinance
- BitDefenderbusiness
- Forcepoint ThreatSeekereducational video
- Googlefinancial_services
- Sophosfinancial services
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual warning signs were identified
フィッシングサイトおよびなりすましに関するご注意
What the captured page showed
1 observation- 01
フィッシングサイトおよびなりすましに関するご注意
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
STICPAY E-Wallet: Secure Money Transfers & Online Payments
- Meta description
STICPAY is a secure and fast E-wallet for international money transfers and online payments. Open a free account now for global transactions.
Pages we read
- Main page/Read
- Terms/policy/terms_conditionsRead
- Support / FAQ/supportRead
03 · Investigation Story
Investigation story
What the site claims
STICPAY E-Wallet: Secure Money Transfers & Online Payments
What we observed
The page content was captured and checked alongside 61 antivirus results.
What independent research found
4 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Recovery & Refund Scams
Service and business model
Financial Service
Observed behavior
Evidence behind this classification
- 013 independent sources carry complaints or warnings about this site, including: "And since I didnt have 100 USD to withdraw ... , both times I lost fees and couldn't get the withdrawal. On the page an ... more than 20% had been charged as…"
- 023 independent sources carry complaints or warnings about this site, including: "I submitted a withdrawal request from my STICPAY wallet on 31.03. 2025, and to this day (over 2 weeks later), I have still not received my money (over $2500…"
- 033 independent sources carry complaints or warnings about this site, including: "For 5 months, Sticpay showed horrible communication and a total lack of transparency, refusing to inform me where my money was. They only finally released my…"
Web research findings
Independent findings for sticpay.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Trustpilotopen
"These guys are scammers and liars. I advise everyone not"
- SmartCustomeropen
"And since I didnt have 100 USD to withdraw ... , both times I lost fees and couldn't get the withdrawal. On the page an ... more than 20% had been charged as fees."
- Trustpilotopen
"I submitted a withdrawal request from my STICPAY wallet on 31.03. 2025, and to this day (over 2 weeks later), I have still not received my money (over $2500 USD)."
- Erfahrungen.appopen
"For 5 months, Sticpay showed horrible communication and a total lack of transparency, refusing to inform me where my money was. They only finally released my funds after I filed an official complaint with the Labuan Financial Services Authority"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainsticpay.com
- Redirects tosticpay.com
- Hosted byAmazon.com, Inc.
- Referencesgoogletagmanager.com · sticcashback.com
Domain Timeline
- Sep 21, 2016Domain registered
First appeared in WHOIS records — 10 years old when this review was saved.
- Oct 18, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Contact email on the site's own domain (account@sticpay.com).
Domain & Encryption
Certificate issued for *.sticpay.com.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Analytics and ads
- Google Tag Manager
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://sticpay.com/
- 2200https://sticpay.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
3 independent sources carry complaints or warnings about this site, including: "I submitted a withdrawal request from my STICPAY wallet on 31.03. 2025, and to this day (over 2 weeks later), I have still not received my money (over $2500…" · 3 independent sources carry complaints or warnings about this site, including: "For 5 months, Sticpay showed horrible communication and a total lack of transparency, refusing to inform me where my money was. They only finally released my…"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Oct 2, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | Adverse | this scan · Oct 18, 2026 |
| Independent research | 4 independent findings were saved | Completed | Adverse | this scan · Oct 18, 2026 |
- Antivirus
- Result1 of 92 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Oct 2, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 18, 2026
- Independent research
- Result4 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 18, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is sticpay.com a scam or is it safe?
Is sticpay.com safe to use?
Has sticpay.com been flagged by antivirus engines?
Is sticpay.com on any phishing or malware blacklists?
How old is the sticpay.com domain?
Does sticpay.com have a valid SSL certificate?
Where is sticpay.com hosted?
How often is the sticpay.com report updated?
08 · Final Verdict
Final verdict
STICPAY is a long-running Costa Rica-registered e-wallet whose own terms disclaim liability for lost funds while users report withdrawals stalled for weeks or months.
STICPAY presents itself as an online payment wallet operated by Extimit LTD, a company incorporated in Costa Rica under Registration No. 3-102-945230, offering LOGIN and SIGN UP entry points and promoting affiliated STICPLAY, STIC CASHBACK and STIC CARD services. The domain is roughly ten years old, uses a valid encrypted connection, carries no browser threat feed warning, and lists a contact address on its own domain — all genuine positives. Against that, four independent review sources describe withdrawal requests that were delayed for weeks or months, with one reviewer saying funds were released only after a complaint to a financial regulator, and the site's own terms state the company will not be liable for loss of funds due to system malfunction, unauthorized access, theft or third-party partners. No malware or phishing behaviour was observed on the page itself, so this is an operator-and-customer-risk finding rather than a technical threat.
09 · Community
Community
Are you the owner of sticpay.com?Verify and reply