Which payment methods have buyer protection? Card, PayPal, bank transfer, BNPL and crypto compared

Buyer protection is not a feeling. It is a specific rule that lets you reverse a payment when the goods never arrive, arrive broken, or the shop turns out not to exist. Every payment method has its own rule, and some have none. This guide lists them from strongest to weakest, so you can pick the method before you type your details, not after the parcel fails to show up.

One principle covers all of it: a payment you can pull back is safer than one you push. Cards and PayPal are pulled by the merchant and can be disputed. Bank transfers, crypto and gift cards are pushed by you and are final.

Credit card: the strongest protection

A credit card gives you two separate routes. The first is chargeback, a card-network rule (Visa, Mastercard, American Express) that lets your issuer reverse a transaction for goods not received, not as described, or charged without authorisation. Typical windows are 120 days from the transaction or from the date delivery was due; you open it with your bank, not with the shop.

The second route depends on where you live:

• United Kingdom: Section 75 of the Consumer Credit Act makes the card issuer jointly liable with the seller for purchases over £100 and up to £30,000, even if the seller has vanished. This applies to credit cards only, not debit.
• United States: the Fair Credit Billing Act lets you dispute billing errors, including goods not delivered, within 60 days of the statement, and caps your liability for unauthorised use at $50 (most issuers waive it).
• European Union: there is no Section 75 equivalent, but PSD2 obliges your bank to refund unauthorised payments (your maximum liability is €50), and EU distance-selling law gives you 14 days to cancel most online purchases regardless of payment method.

The practical rule: for anything expensive, or from a shop you do not know, pay by credit card.

Debit card: chargeback, but no Section 75

Visa and Mastercard debit cards use the same chargeback scheme as credit cards, so "goods not received" can be disputed through your bank. What you lose is the UK's Section 75 joint liability and, in the US, the stronger billing-dispute rights: US debit cards fall under Regulation E, which is written for unauthorised transactions rather than non-delivery, though many banks still handle delivery disputes on request. The money also leaves your account immediately, so you are out of pocket while the dispute runs.

PayPal: 180 days, if you paid the right way

PayPal Buyer Protection lets you open a dispute up to 180 days after payment for an item that did not arrive or is significantly not as described, and PayPal refunds you if the seller cannot show otherwise. Two conditions matter:

• You must have paid for Goods and Services. A payment sent as Friends and Family has no protection at all. A seller who insists on it is telling you why.
• Some categories are excluded, such as vehicles, real estate, custom-made items and payments to a business for something that is not a good or service.

Because PayPal sits between you and the shop, it also hides your card details from the merchant, which is worth something on its own.

Apple Pay, Google Pay and other wallets

A wallet is a way of presenting a card. Your protection is the protection of the card behind it: a credit card in Apple Pay gives you credit-card chargeback; a debit card gives you debit-card chargeback. The wallet adds a one-time token instead of your real card number, so a breached shop cannot reuse your details.

Buy now, pay later (Klarna, Afterpay, Clearpay and others)

BNPL providers run their own dispute programmes: you can typically pause instalments and report a problem, and the provider withholds payment from the shop while it investigates. This works well for non-delivery from a real shop. It is weaker than a credit card because the rules are the provider's own terms rather than law, and regulation is still catching up in most countries. Read the provider's buyer-protection page before relying on it, and remember that missed instalments can still affect your credit file.

Bank transfer, iDEAL, SEPA, Faster Payments, Zelle

A bank transfer is a push payment: you instruct your bank to send the money, and once it has gone there is no chargeback. This is why every fake shop eventually asks for one. Exceptions are narrow:

• United Kingdom: since October 2024, banks must reimburse most victims of authorised push payment fraud on Faster Payments, up to £85,000, unless the customer was grossly negligent. This is the one place a transfer scam is usually refundable.
• Elsewhere: banks may refund on goodwill and can try to recall the funds if you report within hours, but there is no obligation. iDEAL and SEPA transfers in the EU carry no buyer protection of their own; the shop's payment provider does not change that.
• Zelle and similar instant transfers: treat as cash. Some US banks now reimburse certain impostor scams, but not purchase scams.

The right use of a bank transfer is paying people and companies you already know. It is the wrong tool for a first purchase from an unknown shop.

Cash on delivery

Paying the courier at the door protects you completely against non-delivery, which is the most common fake-shop outcome. It does not let you inspect the goods first, so it does not protect against a counterfeit in the box. Where a shop offers it, it is a good choice for a first order.

Cryptocurrency, gift cards, vouchers

None. A crypto transaction cannot be reversed by anyone. A gift-card code, once read out, is spent. No legitimate shop asks to be paid in either; a "seller" who does is a scam, whatever the story. The same goes for prepaid vouchers and "payment links" sent in chat.

The comparison in one list

• Credit card: chargeback plus statutory rights (UK Section 75, US FCBA). Strongest.
• PayPal Goods and Services: 180-day buyer protection, card details hidden.
• Debit card: chargeback through the card network; money leaves first.
• Apple Pay / Google Pay: whatever the underlying card gives, plus tokenised details.
• Buy now, pay later: the provider's own dispute programme; decent for non-delivery.
• Cash on delivery: full protection against non-delivery, none against counterfeits.
• Bank transfer, iDEAL, Zelle: none, except the UK reimbursement rule.
• PayPal Friends and Family, crypto, gift cards: none, ever.

Before you rely on any of this

Protection is a safety net, not a reason to skip the check. A chargeback takes weeks, needs evidence, and does not always succeed. Run the shop through a trust check first, look at how old its domain is and what buyers say elsewhere, and only then choose the payment method. A shop that offers only bank transfer or crypto at checkout has already answered the question for you.