Why This Checklist Exists

Online fraud doesn't always look obviously suspicious. Fraudulent storefronts increasingly mimic legitimate retailers with professional-looking layouts, reasonable prices, and familiar logos. By the time most shoppers realize something is wrong, their card details have already been captured.

This checklist is designed to slow you down for just a few minutes at the point where risk is highest: the moment before you enter your payment information. It works alongside broader purchase research — if you haven't yet evaluated the product or seller, the pre-purchase research checklist is a good starting point. For a complete picture of safe online shopping, the end-to-end safe shopping reference covers the full process from browsing to dispute resolution.

Site Legitimacy Checks

Verify the URL matches the retailer you intended to visit — look for subtle misspellings or added words (e.g., "amazon-secure-checkout.com" is not Amazon). Must
Confirm the address bar shows "https://" and a padlock icon before entering any data; click the padlock to view the certificate details. Must
Search the domain name in a WHOIS lookup tool to check how recently it was registered — domains under a few months old warrant extra caution. Should
Look for a working physical address, phone number, and customer service email on the site's contact page; test at least one contact method. Should
Search the site name plus words like "scam," "review," or "complaint" to surface any reported issues from other shoppers. Should

Policy and Trust Signals

Read the return and refund policy before purchasing — vague or no-return policies are a significant red flag for unfamiliar sellers. Must
Confirm a privacy policy exists and explains how your payment and personal data are stored and used. Must
Check that the checkout page is hosted on the same domain as the store — a redirect to an unrelated domain at payment is a warning sign. Must
Look for independently verifiable reviews on platforms outside the retailer's own site before trusting on-site testimonials. Should

Payment Setup

Choose a credit card or payment method that offers purchase protection and dispute rights rather than a debit card or bank transfer where possible. Must
Consider using a digital wallet or virtual card number instead of entering your primary card details directly into an unfamiliar site. Should
Confirm your card's fraud alert notifications are active so any unauthorized charge is flagged to you immediately. Should
Avoid completing a purchase over public Wi-Fi without a VPN (virtual private network) — unsecured networks can expose data in transit. Should
Check whether your card issuer offers a one-time virtual card number for single-use transactions, which limits exposure if the merchant's data is later compromised. Nice to have

Post-Purchase Preparation

Screenshot or save the order confirmation page and email immediately — you'll need these if you need to file a dispute. Must
Note the expected delivery window and set a reminder to follow up if tracking hasn't updated by that date. Should
Review your card or bank statement within a few days of purchase to confirm only the expected charge appeared. Must
Know your card issuer's dispute filing deadline — for most U.S. credit cards this is 60 days from the statement date, but check your specific terms. Should

Tools That Make This Easier

You don't need specialized software to run these checks. Most of the tools below are built into your browser or freely available through established public services.

Required

Browser address bar and padlock inspector

Quickly verify HTTPS status and view SSL certificate details without installing anything.

Required

WHOIS domain lookup (e.g., ICANN Lookup)

Check the registration date and registrant information for any domain you're unfamiliar with.

Required

Your card issuer's mobile app

Enable real-time fraud alerts, view pending charges, and initiate disputes directly.

Optional

Virtual card number feature (if offered by your issuer)

Generate a single-use or merchant-locked card number that limits exposure on unfamiliar sites.

Optional

VPN (Virtual Private Network)

Encrypt your connection when shopping on networks you don't control, such as public Wi-Fi.

Payment Method: Your Last Line of Defense

Even if you complete every check above, things can still go wrong — packages don't arrive, merchants misrepresent products, or data gets compromised in a breach unrelated to your own caution. How you pay determines how much recourse you have.

Debit Cards Offer Fewer Protections

When you pay by debit card, disputed funds may be withdrawn from your bank account immediately and can take days or weeks to be returned during an investigation — if they are returned at all. Credit cards and many digital wallets place the disputed amount on hold rather than removing it from your available balance. For purchases on unfamiliar sites, this distinction can matter significantly.

Credit cards generally offer the strongest consumer protections under U.S. law, including the right to dispute unauthorized charges. Digital wallets add a layer by keeping your actual card number away from individual merchants — the comparison of digital wallets versus entering card details directly explains the security trade-offs in plain terms. For a broader overview of how different payment methods compare, see the guide to online payment options.

Your shopping account security matters too. A fraudster who gains access to a saved-card account bypasses the checkout security checks entirely. Passwords alone aren't sufficient protection — two-factor authentication on every retail account is a meaningful safeguard, and account takeover prevention practices are worth building into your routine.

Never Enter Card Details on a Site You Can't Verify

If a site fails multiple checks in the legitimacy section above — especially a missing HTTPS connection or a checkout page that redirects to a different domain — stop the transaction entirely. No discount or urgency justifies handing payment details to an unverified destination. You can always find the same or a similar product through a seller you can properly verify.