If a shopping site blocks payment until you register, that's forced account creation in the consumer sense. The store chose an account-only checkout. That choice, on its own, does not mean your device or identity has been attacked.

U.S. shoppers don't have a general nationwide right to guest checkout under the sources reviewed here. Compare the total price, read the deal and privacy terms, and decide whether the purchase is worth handing over a profile. If you do register, use a password you don't use anywhere else.

Security teams use the same phrase for bots opening fake accounts at scale. That's a platform-abuse problem, not proof that the retailer in front of you is fraudulent. Your questions are narrower: is the seller legitimate, what are you agreeing to, and did someone open an account in your name without permission?

Common examples of forced account creation

A required account isn't automatically a scam. Pause if the web address is misspelled, the page leans on unexplained urgency, the price stays unclear, or the form asks for more information than the transaction appears to need.

Is a U.S. store required to offer guest checkout?

Usually no. The merchant's checkout policy, and the laws that already apply to that business, control whether registration is part of the sale. The research for this piece does not establish a blanket U.S. right to buy online as a guest.

The Federal Trade Commission's online shopping guidance points shoppers toward other protections: compare sellers, check the full price, read shipping and return terms, use an encrypted payment connection, and pay attention to delivery promises. If a seller doesn't promise a shipping time, the FTC says the seller generally must ship within 30 days after receiving your name, address, payment, or permission to charge your account.

That 30-day shipping rule does not decide whether a retailer can demand an account. Creating a login also does not excuse the seller from honoring its shipping representations or from presenting important purchase terms clearly.

EU privacy rules are a separate issue

European shoppers may hear different advice. Legal explainers of the European Data Protection Board's Recommendations 2/2025 describe a stricter view of permanent accounts for one-time purchases, including the idea that tracking can be handled through email, links, or secure forms. See Schoenherr's explanation and Osborne Clarke's analysis.

Those materials are not a U.S. guest-checkout rule. Don't use them to decide your rights in a U.S. transaction.

What to check before creating an account

Start with the seller, not the register button. Use a known web address or the official app. Skip unexpected email or text links. Before you type a card number or ID details, look up contact information, shipping terms, the return policy, and the retailer's reputation.

A familiar logo is not enough. Scammers copy branding and build checkout pages that harvest passwords or card numbers.

Then add up the real price: shipping, handling, taxes, delivery charges, membership fees, and any required extra purchase. A registration-only coupon can disappear into a recurring membership or extra conditions at checkout. Screenshot the offer and the final order page, and keep the confirmation email.

Retailers often need a name, delivery address, email, and payment details to complete an order. They may not need every optional profile field on the first purchase. Watch for marketing email or texts, personalized advertising, saved cards, date of birth or other demographic details, public profile fields, and data sharing with partners. Decline optional communications you don't want. Read how the retailer describes account deletion and data retention, but don't assume closing an account wipes every transaction or legal record.

Protect the login itself. Use a unique password, preferably generated and stored by a password manager, and turn on multifactor authentication if it's offered. Never reuse a password from email, banking, social media, or another store. The FTC also advises entering payment information on an encrypted connection. Encryption protects data in transit. It does not prove the seller is honest or that the company will handle your information carefully.

What to do if checkout requires an account

Hunt for guest language before you give up: "continue as guest," "checkout without an account," or "email order." The registration button is often louder than the guest path.

If you still can't find it, use the retailer's official support page and ask whether a one-time order can go through without a permanent profile. Compare that seller's total cost, delivery promise, and return terms with another established retailer.

Should you register anyway, give only what the order needs, use a unique password, and leave marketing boxes unchecked. Afterward, open account settings, remove saved payment details, and close the account if the retailer offers that option and you no longer need it.

Walk away from a site that pushes you to pay before showing the final price, hides important terms, or asks for passwords by email or text.

If someone opened an account in your name

An unrequested account is a different problem from a store that simply refuses guest checkout. It might be a mistyped email. It can also be an early sign of identity theft.

Don't use links in the notification. Type the retailer's address yourself or open its official app. Call or message the security or fraud department, ask what information is attached, whether an order or payment exists, and how to secure or close the account. Keep the case number and copies of your messages.

If that password was reused anywhere else, change those logins too and enable multifactor authentication. Then review bank, debit, prepaid, and credit-card statements. For an unauthorized charge, contact the financial institution or card issuer at its official phone number, not a number from the suspicious email.

Save the account-created notice, order confirmations, screenshots, shipping details, and support replies. Don't delete those records while the issue is open. When identity theft looks likely, the U.S. government's IdentityTheft.gov process can help you document it and organize recovery. If credit, a tax identity, or sensitive government identification is involved, check your credit reports and ask the relevant official provider about a fraud alert or security freeze.

For a one-time purchase, an account can make tracking easier, but it also leaves you with another login to protect. Guest checkout is usually the simpler privacy choice when it's available. If it isn't, weigh the seller, the complete price, the delivery promise, and the data requested before you create the profile. If an account already appeared without your consent, skip the checkout debate: verify the retailer independently, contact its fraud team, lock down reused passwords, and check your payment accounts.