Abstract: An anti-fraud token system is disclosed in which the authentication process is performed primarily on the client side. A client according is provided with an authentication list of websites for which authentication is required, and their respective authentic addresses. The client also asks a user to select a token, which may include graphics, text, and/or sound. When the user accesses an information source from the authentication list, the client notes that the address which the user is accessing is on the list. The client then displays the token as previously selected by the user to the user along with the accessed information, so that the user knows that the information he/she is accessing is authentic.