A safer online purchase usually passes five basic tests: you know who is selling it, you can see the complete cost, the delivery promise is clear, the return route is usable, and the payment method gives you a way to report a problem. If one of those answers is missing, pause before paying.

No single signal proves that a store is trustworthy. HTTPS encrypts the connection, but it doesn't verify the business. A familiar marketplace may still contain listings from third-party sellers.

This checklist is for U.S. consumers. Marketplace policies, card agreements, and state laws can differ, so check the terms that apply to your order.

A quick check before you pay

Make sure you can:

• Open the retailer's official website or app.
• Identify the business and the seller behind the listing.
• Compare the product, price, and specifications with reliable sources.
• Find recent reviews, including complaints about delivery and refunds.
• See HTTPS at checkout without a browser security warning.
• Use a payment method you recognize and control.
• See shipping, taxes, fees, subscriptions, and the full amount due.
• Save the promised delivery date, return terms, and order records.
• Find the marketplace, seller, bank, or card issuer's process for a problem.

Open the real store, not a copy

Type the retailer's address yourself, use a bookmark you created earlier, or open the retailer's app from your device's app store. Check the publisher before installing an app. Unexpected links in emails, text messages, social media posts, advertisements, or coupon messages deserve extra caution. A fake store can copy a logo, product page, chat window, and checkout screen.

Look at the full web address before entering personal or payment information:

• Watch for misspellings, extra hyphens, unusual characters, and unexpected domain endings.
• In brand.example.com, example.com is the controlling domain. The word brand in front of it doesn't make the site an official brand site.
• Treat a new store with no clear business identity as higher risk.
• Search for the business name, address, and phone number separately. Don't rely only on contact details printed on the site.
• If a message asks you to confirm an order or payment, contact the retailer through information you found independently.

A polished design or active social-media account isn't proof of a legitimate seller. A missing address or vague contact page may have an innocent explanation, but it gives you a reason to verify the business before continuing.

HTTPS protects the connection, not the seller

At checkout, the browser should show https and no certificate or other security warning. HTTPS encrypts information moving between your browser and the website. It doesn't tell you who runs the site, whether the product is genuine, or whether the seller will honor a refund.

Don't enter card details after ignoring a browser warning or on a page that uses plain HTTP. The FDIC's guidance on online bargain scams warns that suspicious links can lead to fake sites or download malware that steals passwords and payment information.

Leave the page if it asks you to install an unfamiliar browser extension, open a coupon file, or give someone remote access to your device. Those requests aren't a normal part of paying for ordinary merchandise.

Find the seller behind a marketplace listing

On Amazon, eBay, and other marketplaces, check the individual seller rather than stopping at the marketplace's name. Review the seller's:

• Feedback history and recent negative reviews.
• Number of completed sales.
• Location and processing time.
• Return terms.
• "Sold by" and "shipped by" details, which may refer to different parties.

Keep messages and payments inside the marketplace. A seller who wants to move you to private chat, send an outside payment link, or have you cancel the marketplace order may be taking away protections available through the platform.

For an expensive or safety-critical product, spend a few minutes checking the listing itself:

• Search the model number on the manufacturer's official site.
• Compare specifications, packaging, included accessories, and warranty terms.
• Confirm whether an authorized retailer is required for warranty coverage.
• Be wary of vague descriptions, stock photos only, or a warranty the manufacturer won't recognize.
• Compare the price with several established retailers. A very low price paired with urgency is more concerning than either sign on its own.

A polished product image, automated chatbot, or confident seller message is not independent verification. If the seller's assurances matter to the purchase, confirm the business through a phone number or official account you found separately.

Read reviews for patterns

A star average can hide the problem you need to know about. Start with the newest reviews, then read the one- and two-star feedback for recurring complaints about counterfeit goods, missing parts, late delivery, or refunds.

Look for:

• Specific product details, photographs, model numbers, and dates.
• Comments about customer support after the sale.
• Reviews on more than one independent site.
• Signs that reviews cover several product versions, colors, or sellers rather than the exact item you're considering.
• Repeated wording, generic praise, or profiles that don't provide useful product details.

A "verified purchase" label may indicate that someone bought an item, but it doesn't guarantee that every statement in the review is accurate. Reviews are evidence about possible problems, not a substitute for checking the seller and payment route.

Pick a payment method with a recovery route

For an unfamiliar online merchant, a credit card is often a sensible default because the purchase doesn't come directly out of your deposit account and the issuer has a billing-dispute process. That process isn't a guarantee of a refund. The result can depend on the type of charge, the evidence, the card agreement, and whether you followed the issuer's instructions.

The FTC's guidance on using credit cards and disputing charges recommends keeping receipts and transaction details. If a U.S. credit-card statement contains an unauthorized, duplicate, or incorrect charge, contact the issuer through the number on the card or its official app and follow its process. A phone call may not replace a required written notice.

A debit-card error, a credit-card billing dispute, a digital-wallet claim, and a request for a merchant refund are different processes. Don't assume that a rule or deadline for one payment rail applies to another.

Secure the account and device you use to shop

Use a different password for each retailer. A password manager can create and store them, and multifactor authentication adds protection to accounts that contain saved payment details, addresses, loyalty points, or order history.

Before entering a password or payment information:

• Update the operating system, browser, and shopping apps.
• Secure the email account connected to the retailer.
• Don't give a one-time security code to someone who contacted you unexpectedly.
• Use the official app or type the retailer's address instead of following a payment link.
• Avoid saving payment details at a merchant you may use only once.
• Don't enter passwords on a shared computer you don't control.

If you clicked a suspicious link, close it and open the retailer's official site separately. If you entered a password, change it from the genuine site and change it anywhere else you reused it. If you entered card information, contact the issuer and ask whether the card should be replaced.

Check the total at the last checkout screen

The advertised price may not be the amount you pay. The FTC's online shopping guidance recommends checking shipping, handling, delivery, taxes, and other fees.

Before clicking the order button, look for:

• Shipping and handling charges.
• Sales tax.
• Customs or brokerage costs on a cross-border order.
• Service, processing, marketplace, or payment fees.
• Optional warranties, insurance, donations, or add-ons.
• Memberships, subscriptions, auto-refills, or free trials that become paid plans.
• The currency, exchange rate, and any foreign-transaction fee your card may charge.
• Buy now, pay later installments, late fees, and the total amount owed.

Remove preselected extras you don't want. Save a screenshot of the final total and promised delivery date. Redact unnecessary personal or payment information before sharing that screenshot later.

Separate shipping time from arrival time

A statement such as "ships in three days" usually describes the seller's processing time, not the carrier's transit time. Look for the actual delivery estimate and save it.

For many U.S. merchandise orders covered by the FTC's Mail, Internet, or Telephone Order Merchandise Rule, a seller that makes no shipping-time promise generally must ship within 30 days after receiving your name, address, payment, or permission to charge your account. That's a shipping deadline, not a promise that the package will arrive within 30 days, and exceptions can apply.

Keep the promised date and any delay notice. Open tracking from the order page or the carrier's official website rather than clicking an unexpected delivery text.

If the order is late, contact the seller in writing and state what you want, such as a shipment update or cancellation. Keep the response. If the seller doesn't resolve the matter, use the marketplace's order-help or dispute process before its deadline.

Read the return and warranty terms before ordering

Don't assume online purchases include free returns or a long return window. Find these details before paying:

• How many days you have to request a return and when that period starts.
• Whether the item must be unused, unopened, or in its original packaging.
• Who pays return shipping and whether the seller provides a label.
• Restocking fees, final-sale exclusions, and category restrictions.
• How the refund is issued and when to expect it.
• Whether the seller or the marketplace handles the return.
• Whether the manufacturer's warranty is separate from the seller's return policy.

Save the policy as it appeared when you bought the item. For an expensive order, photograph the package, shipping label, serial number, and product condition when it arrives. If a message supplies a different return address, go back to the official order page for instructions instead of mailing the item to that address.

Share only the information the purchase needs

A routine retail checkout normally shouldn't require your Social Security number. Provide the information needed for delivery and payment, unless you're knowingly applying for a financial product or another service that requires identity verification.

Guest checkout can limit the information stored by the retailer. Decline unnecessary marketing permissions and check what the retailer says it collects and shares. A privacy policy describes data practices; it isn't a security certification.

Don't send a photo of your card, your password, or a verification code by email or chat.

Keep a purchase file

Save or download the records that show what you agreed to buy:

• Product page and seller name.
• Final price, taxes, fees, and delivery estimate.
• Return, refund, warranty, and subscription terms.
• Confirmation email, invoice, and payment receipt.
• Tracking information and messages with the seller.
• Photos of a damaged package or incorrect product.

These records help when you contact the seller, marketplace, bank, or card issuer. Before storing or sharing screenshots, redact full card numbers and other personal information that isn't needed to identify the transaction.

Red flags that justify walking away

Stop the purchase when a seller:

• Demands gift cards, cryptocurrency, a wire transfer, or payment to a personal account.
• Sends an unsolicited link to "fix" a payment or delivery problem.
• Uses a countdown, threat, or one-time-only offer to rush you.
• Uses a domain that imitates a known brand.
• Won't provide clear shipping or return terms.
• Avoids basic questions about the product or business.
• Insists that you leave a marketplace's messaging or payment system.
• Requests a password, one-time code, or remote access to your device.

One unusual feature can have an innocent explanation. Several together are a good reason to close the page and find the item through a retailer you can verify.

What to do when an online purchase goes wrong

Keep the response focused and in writing:

1. Stop clicking links in suspicious messages and don't send more money.
2. Contact the seller through the official order page. Describe the problem and request a specific remedy.
3. Open a marketplace case before the platform's deadline if the seller doesn't resolve it.
4. Contact your credit-card issuer or bank through its official app or the number on your card. Say whether the issue is an unauthorized transaction, wrong amount, duplicate charge, non-delivery, or a merchant refund problem.
5. Replace exposed card details, change reused passwords, and turn on multifactor authentication.
6. Keep the order records, screenshots, tracking history, and support responses together.
7. Report suspected fraud to the marketplace and the relevant U.S. consumer-protection agency.

Don't wait for a seller's promised response if your card or bank account is being used without permission. Contact the financial institution immediately and ask which fraud or dispute procedure applies to that payment type.

Final check before "Place order"

Match the merchant name to the website domain. Confirm the complete amount, delivery date, return deadline, and payment route. Make sure the payment is staying inside the legitimate checkout.

If any answer is missing or the seller is creating pressure, close the page and verify the details through an official channel before trying the purchase again.