How to Spot a Fake Online Store Before You Pay

A fake online store almost always fails at least one of five checks: an impossibly low price, a domain registered weeks ago, no verifiable business identity, a demand for an irreversible payment, and a total absence of independent reviews. You can run all five in roughly three minutes, before you type a single digit of your card number, and most scam sites collapse under the first two.

Start With the Domain, Not the Design#

Scam sites can look flawless because the storefront is usually a stolen Shopify or WooCommerce template with real product photos lifted from the genuine brand. The design tells you almost nothing. The domain's history tells you a lot.

Check the domain's age#

Type the store's domain into ICANN Lookup (lookup.icann.org) or who.is and read the "Creation Date." A retailer advertising premium electronics on a domain registered 18 days ago is the single most reliable red flag there is. Legitimate shops accumulate a registration history measured in years; disposable scam domains are spun up, run for a few weeks of ad spend, and abandoned before the chargebacks land. If the WHOIS record is hidden behind a privacy service and the site is new and pushing steep discounts, treat that combination as a warning rather than a coincidence.

Read the actual URL characters#

Look closely at the exact spelling. Scammers register look-alikes using cheap TLDs (.shop, .top, .buzz, .store) or homoglyph tricks such as "adidaas", "nike-outlet-sale", or a Cyrillic "а" that renders identically to the Latin one. If you arrived from a Facebook or Instagram ad, do not trust the display name; hover the link or check the address bar. The real brand almost never sells flagship gear from a hyphen-stuffed subdomain like "official-clearance-nike.shop".

Verify the Business Actually Exists#

A padlock in the address bar only means the connection is encrypted, not that the seller is honest. Anyone can get a free HTTPS certificate from Let's Encrypt in minutes, so the padlock protects your data in transit and says nothing about who receives it. Verify the human beings behind the store instead.

Find and test the contact details#

Open the "Contact Us" and "About" pages and look for a physical address, a phone number, and a company name. Then check them:

• Paste the street address into Google Maps and switch to Street View. Scam sites frequently list a random residential house, an empty lot, or an address shared by dozens of unrelated "stores".
• In the UK, search the company name at Companies House (find-and-update.company-information.service.gov.uk) to confirm it is registered and not dissolved.
• For EU sellers, validate any stated VAT number through the European Commission's VIES tool.
• Call or email once. A dead line, an inbox that bounces, or a lone web form with no other channel are all meaningful.

Read the returns and refund pages too. Genuine merchants spell out a clear window (commonly 14 or 30 days) and a return address. Fakes either omit these pages, paste boilerplate that names a different company, or list a return address in a country that contradicts their "local warehouse" claims, the classic dropship tell.

Test the Products and Photos#

Reverse-search the product images#

Right-click the main product photo and use Google Lens or TinEye to search for it. If the identical image appears on AliExpress, the real manufacturer's site, or hundreds of other stores, you are likely looking at recycled stock imagery wrapped around an inflated or fake listing. This trick alone exposes a large share of dropship-scam and counterfeit shops in seconds.

Sanity-check the price against the real market#

The most common lure is a price that switches off your caution. Compare the exact item on two or three established retailers to establish the going rate, then judge the gap. A genuine seasonal sale rarely exceeds 30 to 50 percent off; a brand-new PlayStation, GPU, or designer bag at 80 to 90 percent below everyone else is not a deal, it is bait. Ignore countdown timers and "only 1 left" banners, they are scripted urgency that resets when you refresh the page, engineered to stop you comparing.

Pay Only in a Way You Can Reverse#

Your payment method is your safety net, so this is the check that actually gets your money back if everything else fails.

The protected options#

• Credit card. In the US, the Fair Credit Billing Act caps your liability for unauthorized charges at $50, and card networks let you file a chargeback for goods that never arrive or are not as described. In the UK, Section 75 of the Consumer Credit Act makes the card issuer jointly liable for purchases between £100 and £30,000.
• PayPal Goods and Services. This tier includes Purchase Protection and a dispute process. Crucially, it is different from "Friends and Family", which has no buyer protection at all, so a seller who insists you pay via Friends and Family is asking you to disarm your own safety net.

The irreversible red flags#

If a checkout steers you toward a bank/wire transfer, Zelle, Venmo, Cash App, cryptocurrency, or store gift cards, close the tab. Scammers prefer these precisely because they are effectively final; once sent, there is no chargeback mechanism to claw the money back. A legitimate store will always offer a normal card or PayPal Goods and Services option, and a real checkout typically hands you off to a recognizable processor such as Stripe, Shopify Payments, or PayPal rather than a plain form that just emails your card details somewhere.

Let Independent Shoppers Confirm It#

Reviews displayed on the store's own site can be invented or cherry-picked, so search away from the site. Google the shop's name plus "review", "scam", or "legit", and check ScamAdviser and Trustpilot.

Reading reviews without being fooled#

• Be suspicious when every review is five stars, posted in the same short window, and written in oddly uniform, machine-translated English.
• Trust a steady, mixed pattern over a flood of perfect praise, and look for complaints that describe a repeatable failure such as "item never arrived" or "received a cheap counterfeit".
• If you can find almost no independent trace of the store anywhere, treat that silence as data. Real shops leave footprints over months; a tempting deal with zero external history is reason enough to walk away.

The Common Mistake Almost Everyone Makes#

Most people check for the padlock, see HTTPS, and stop. That is the one signal scammers most easily fake, and relying on it is exactly how careful shoppers still get caught. The padlock validates the tunnel, never the merchant. Judge the seller by domain age, a verifiable identity, a reversible payment method, and independent reviews instead.

Frequently Asked Questions#

Does the padlock or HTTPS mean a store is safe?#

No. HTTPS only encrypts the connection between your browser and the site, and free certificates from providers like Let's Encrypt take minutes to obtain. A scam site can display a perfect padlock. Use it to confirm your data is not being intercepted, then verify the seller separately.

I already paid a fake store. What do I do first?#

Contact your card issuer or PayPal immediately and open a dispute or chargeback, ideally the same day. Keep every order confirmation, email, and screenshot as evidence. Then report the site to your national consumer body, such as the FTC at reportfraud.ftc.gov in the US or Action Fraud in the UK.

How can I check how old a store's domain is?#

Enter the domain at lookup.icann.org or who.is and read the "Creation Date" field. A domain only days or weeks old, paired with heavy discounting and paid social ads, is a strong warning sign. Established retailers almost always show registration dates going back years.

Are stores advertised on Facebook and Instagram trustworthy?#

Not automatically; paid ads are not vetted for honesty. Click the three dots on the ad and use "Page transparency" to see when the page was created and where its admins are based. A page opened last month, run from an unrelated country, selling luxury goods at a fraction of retail, deserves every check above before you buy.