No single badge, review score or padlock proves that an online store is legitimate. Before buying, confirm who operates it, read the delivery and return terms, compare reviews across independent sources and use a payment method with a clear dispute process. If important details conflict or the seller insists on an irreversible payment, leave.
A quick check takes a few minutes and can prevent a much longer argument with a silent inbox. Start with the evidence that affects the purchase, not with how polished the homepage looks.
Use several checks together
| Check | Useful evidence | What does not prove legitimacy |
|---|---|---|
| Business identity | Consistent legal name, address, phone number and contact route | A contact form with no company details |
| Product and price | Specific descriptions, realistic photos and a price that fits the market | A large discount timer that resets after refresh |
| Shipping and returns | Clear destinations, times, costs, return address and refund rules | A copied policy that names another business |
| Reputation | Detailed reviews across more than one source and a believable history | Only perfect reviews posted within a short period |
| Payment | A familiar checkout and a payment method with dispute options | A demand for gift cards, crypto, wire transfer or payment outside the store |
| Connection security | HTTPS with no browser warning | A padlock by itself |
Confirm the seller exists beyond the website
Look for a legal business name, physical or service address, working email and usable phone number. Search the name and contact details separately. The same address should not belong to an unrelated company, and the phone should not appear across many disconnected stores.
Check the About and Contact pages for consistency rather than length. A long origin story is less useful than a verifiable operator and a support route that answers a straightforward pre-sale question. Article Thirteen’s guide to digital platform trust signals explains why clear ownership, pricing and support matter more than decorative security claims.
Read the policies before the checkout page
Shipping, return and refund terms should answer basic questions without sending the reader in circles. Check where the seller ships from, who pays return postage, how quickly a return must be requested and whether discounted items are excluded. Search the policy text for another company name, an unexpected country or contradictory deadlines.
- Is the delivery estimate clear for the buyer’s location?
- Does the store give a real return address or explain when one is supplied?
- Are refunds returned to the original payment method?
- Are restocking, return shipping or cancellation fees disclosed?
- Does the privacy policy explain what happens to account and payment-related data?
Treat reviews as evidence, not a vote
Search for the store name with terms such as review, complaint, refund and delivery. Read the details, dates and reviewer histories instead of relying on the average score. The FTC’s guide to evaluating online reviews recommends checking multiple sources and watching for unusual bursts of reviews or accounts that have reviewed only one product.
A new store may have few reviews, which creates uncertainty but does not automatically prove fraud. A large number of perfect reviews does not settle the question either. Look for specific descriptions of ordering, delivery, product quality and customer support, then compare those claims with the store’s own policies.
Check the domain, but interpret it carefully
The ICANN registration data lookup can show when a domain was registered and which registrar manages it. A very recent registration combined with unrealistic prices and missing business details increases risk. Privacy-redacted ownership is common, however, so a hidden registrant name is not proof that a store is fake.
Also check the spelling of the domain. Impersonation sites often add a word, letter or different domain ending to resemble a known retailer. Open the address from a trusted source rather than a surprising message or advertisement when possible.
Understand what HTTPS does and does not do
HTTPS protects information while it travels between the browser and website. It does not verify that the seller will deliver the product or honor a refund. Google Chrome’s connection security guidance still advises users to be careful with private information even on a secure connection, and to avoid sites marked dangerous.
Choose a payment method with a recovery path
The FTC’s online marketplace guidance recommends checking the seller and refund terms, keeping purchase records and using safer payment options. Be especially cautious if a seller insists on gift cards, wire transfers, crypto or payment through an unrelated personal account. These methods can make recovery difficult.
- Save the product page, price, delivery promise and refund policy before paying.
- Check the final total for unexpected subscriptions, fees or add-ons.
- Use the store’s normal checkout, not a payment link sent privately by the seller.
- Keep the order confirmation, receipt and all support messages.
- Review the statement and act quickly if the charge is wrong or the item does not arrive.
What to do if you already paid
Contact the seller through the documented support channel and keep a copy of the request. If the seller does not resolve the problem, contact the card issuer, bank or payment provider promptly and ask about its dispute process. Report a deceptive seller to the relevant consumer-protection authority and change any reused password exposed through the account.
The goal is not to label every unfamiliar store as fake. It is to decide whether the evidence is strong enough for the amount of money and personal information at risk. When the identity, policies, reputation and payment method do not add up, the best bargain is the one you do not buy.