Understanding HATEOAS in REST APIs

Most developers say they build “RESTful APIs”. But are they really REST… or just HTTP + JSON?