How to Tell If a Website Is Safe Before You Buy Anything

To tell if a website is safe before you buy something, check five things in under two minutes: the web address itself, the company's contact information, how long the domain has been registered, what independent reviewers say about it, and whether the checkout page looks consistent with the rest of the site. If any one of those comes back wrong, stop and don't enter your card details. The question "is this website safe" doesn't have one magic answer — it's a handful of small checks that together tell you whether a store is real or built to take your money and disappear.

Is this website safe? Start with the address bar

Look at the URL itself before anything else. A padlock icon and "https://" mean the connection is encrypted, but that only proves nobody can eavesdrop on the data — it says nothing about whether the business behind the site is honest. Scam sites use HTTPS too; it's free and automatic with most hosting.

What's more telling is the domain name. Type it out and read it carefully. Scam stores often use a brand name with extra words or characters added — "nike-outlet-sale.com" instead of "nike.com," or a misspelled version of a known retailer. If the site claims to be a specific brand's official store, check that the domain actually matches what that brand uses elsewhere, like in its email footer or app listing.

Check who owns the domain and when it was registered

Go to a free WHOIS lookup tool (whois.com or ICANN's lookup at lookup.icann.org) and search the domain. You're looking for the creation date. A site selling "limited edition" products or running steep discounts that was registered three weeks ago is a strong warning sign. This isn't proof of a scam by itself — new businesses exist — but combined with other red flags, a brand-new domain pushing urgency ("sale ends tonight") is a classic pattern.

How do I check if an online store is legitimate?

Beyond the domain, look for specifics a real business can't easily fake convincingly:

• A real street address and phone number — not just a contact form. Search that address on Google Maps. If it's a residential building or doesn't exist, that's a problem.
• A return and refund policy with actual detail — timeframes, conditions, who pays return shipping. Vague one-line policies ("all sales final, no exceptions") on a store selling physical goods are a flag.
• Product photos that aren't obviously stolen. Right-click a product image and run a reverse image search (Google Images or TinEye). If the exact photo shows up on twenty other unrelated store names, you're likely looking at a dropshipping front with no real inventory.
• Consistent branding. Check the site's social media links. If the Instagram or Facebook icon leads to an account with a handful of followers, no real engagement, and posts that are only product ads, that's worth noting.

What do other buyers say about this site?

Search the exact store name plus the word "reviews" or "scam" in a search engine. Read a few results from outside the store's own website — Reddit threads, Trustpilot, or the Better Business Bureau (bbb.org) if it's a US-based company. Pay attention to recent reviews, not just the overall star rating, since some stores buy early positive reviews and let quality slip later. If a store has zero mentions anywhere outside its own site despite claiming to have thousands of customers, treat that as a gap worth questioning rather than proof of guilt — some small or very new stores genuinely have little online footprint yet.

On a platform where real users leave feedback about specific sites, you can often find comments about exactly this: whether an order arrived, whether sizing matched the listing, whether customer service responded. That kind of firsthand detail is more useful than a star rating alone.

Is it safe to enter my card details here?

Before you type in payment information, check the checkout page specifically, even if the rest of the site looked fine:

• The checkout URL should still be on the same domain you started on, or a recognized payment processor like Stripe, PayPal, or Shopify's checkout domain. If it suddenly redirects to an unfamiliar domain, stop.
• Legitimate stores offer at least one payment method with buyer protection — a credit card or PayPal. If a site only accepts wire transfer, cryptocurrency, or gift cards for a retail purchase, that's a serious warning sign, since those payment methods are very hard to reverse.
• Look for a visible refund or dispute path. If something goes wrong, you want to know you can get a chargeback through your card issuer.

What if I already bought something and now I'm worried?

If you paid by credit card and the site turns out to be fake, contact your card issuer and ask about a chargeback — most issuers give you 60 to 120 days to dispute a charge, depending on the card network. If you paid through PayPal, open a dispute in the Resolution Center within 180 days of the transaction. Change the password on any account where you reused that password, since scam checkout pages sometimes harvest login credentials along with payment details.

A quick checklist before you buy

• Domain name matches the brand exactly, no odd extra words
• WHOIS shows a registration date that makes sense for the business's claimed history
• Real address and phone number that check out on a map search
• Product photos aren't duplicated across unrelated stores
• Independent reviews exist outside the store's own site
• Checkout stays on a recognized domain and accepts a reversible payment method

None of these checks takes more than a minute or two individually, and running through all of them before checkout takes less time than waiting on hold with your bank after a bad purchase. If two or more come back wrong, close the tab and buy elsewhere.

Frequently Asked Questions

Does a padlock icon or HTTPS mean a website is safe to buy from?

No, HTTPS only means the connection between your browser and the site is encrypted, so no one can intercept the data in transit. It says nothing about whether the business itself is legitimate or will actually ship your order. Scam sites can and do use HTTPS, since it's free and automatically included with most web hosting.

How can I check how old a website's domain is?

Use a free WHOIS lookup tool like whois.com or ICANN's lookup.icann.org and search the site's domain name to find its creation date. A domain registered only weeks ago that's already selling 'limited edition' items or running urgent discounts is a common warning sign, though a new domain alone isn't proof of a scam.

What should I do if a product photo on a store's site looks suspicious?

Right-click the image and run a reverse image search using Google Images or TinEye to see where else it appears online. If the exact same photo shows up on many unrelated store names, it likely means the site has no real inventory and is a dropshipping front rather than a genuine retailer.

Where should I look for reviews of an online store before buying?

Search the exact store name along with the words 'reviews' or 'scam' in a search engine and read results from sources outside the store's own website. Independent reviewers and forums are more reliable than testimonials posted on the site itself, since those can be fabricated.