Why this is harder than it looks
Anyone can build a convincing shop in an afternoon. Templates, stock photos and payment buttons are widely available, and the same tools that help honest small businesses also help fake ones. So there is no single sign that proves a store is trustworthy. The practical approach is to look for several independent signals, and to limit what you could lose if you are wrong.
Start with the address
Before anything else, look at the web address in the browser bar.
- Is it the exact address of the shop you meant? Lookalike domains swap letters, add hyphens or use unusual endings to resemble a known brand. Typing the name yourself, or using a bookmark, is safer than following a link from an ad or message.
- Does it make sense for the business? A well-known brand sitting on a strange address is a warning.
- How did you arrive? Links in unexpected messages and in social media ads are where many fake shops find victims. Suspicious messages that promise unbelievable discounts often lead to such sites.
What a secure checkout shows
At the payment step, a legitimate site normally:
- Uses HTTPS, shown by a padlock or similar symbol and an address beginning with
https. This means the connection between your browser and the site is encrypted. - Hands card entry to a recognized payment provider, either through fields embedded in the page or a redirect to the provider’s page. The overview of online payments describes who is behind this step.
- May ask for an extra confirmation from your bank, such as a code or a prompt in your banking app.
- Asks only for what is needed to complete the order: card details, billing and delivery address. It should not ask for your card PIN, online banking password or an unrelated personal identifier.
The padlock deserves a caution. It tells you the connection is encrypted, not that the owner is honest. Fraudulent sites can and do use HTTPS. Treat it as a minimum requirement, not a mark of approval.
Signs that support trust
None of these is conclusive alone, but together they build a picture:
- Real contact details. A physical business address, a phone number or a working email, and a way to reach support. Check they are not copied from another business.
- Clear policies. Readable terms on delivery, returns, refunds and privacy. Vague, missing or copied text is a weak sign.
- Sensible prices. Prices in line with the market. A new designer item at a tiny fraction of the usual price is more likely a trap than a bargain.
- Independent reviews. Look for feedback away from the shop’s own pages, in places the seller does not control. Reviews on the site itself can be edited or invented, and even independent ones can be manipulated, so read for specifics rather than counting stars.
- History. A shop that has existed for a while and is mentioned in forums or by acquaintances is generally a safer bet than one that appeared last week, though newness alone is not proof of fraud.
- Spelling and design quality. Poor language, mismatched fonts or broken pages can indicate a rushed fake, but polished design proves little, since good-looking fakes are common.
Common warning signs
- Pressure tactics such as countdown timers and “only two left” banners that reset when you reload.
- Payment only by bank transfer, gift cards, cryptocurrency or a person-to-person app. These are hard to reverse; card payments usually come with stronger dispute routes. The risks of payment apps used between friends are covered separately.
- A request to continue the deal off the site, by message or email.
- No clear company name or legal details.
- Reviews that read as though one person wrote them all.
Limiting your exposure
Even good habits cannot guarantee a safe outcome, so reduce the stakes:
- Pick a payment method with protection. Cards and some wallet payments often offer dispute procedures that bank transfers do not. Check what yours provides.
- Use a stand-in number. If your provider offers virtual card numbers, using one with a spending limit for an unfamiliar shop means the real number never reaches it.
- Keep accounts separate and strong. A password manager helps you use a unique password for each store, so a leak at one does not open others. Avoid creating accounts when a guest checkout is available.
- Do not store card details with shops you rarely use. The fewer places holding them, the fewer that can suffer a data breach.
- Watch your statements. Check for charges you do not recognise after buying from a new site, and enable bank alerts.
- Keep your device updated. Software updates close holes that malicious pages try to use.
If you suspect you were tricked
Contact your card issuer or payment provider promptly. Tell them what happened, and ask about blocking the card or disputing the charge. Keep the order confirmation, screenshots and messages. Change the password on any account you reused on the site. You can also report the shop to a consumer protection body in your country. Being scammed is not a sign of carelessness; these sites are designed to look convincing, and acting quickly improves your chances of limiting the damage.