Is This Online Store Legit? 7 Checks Before You Pay

Updated 2026-09-04 · HasTrust

Found a store you've never heard of with a deal that looks great? Before you type in your card number, spend five minutes on these seven checks. None of them require special tools, and together they catch the vast majority of shady shops. You can also run the store through HasTrust's free shop checker to see key trust signals in one place.

1. Check how old the website is

Scam shops tend to be brand new. They pop up, take orders for a few weeks, then vanish and reappear under a new name. A legitimate store selling thousands of products usually has a history.

  • Look up the domain's registration date with a WHOIS lookup (search "whois" plus the domain) or check the store on hastrust.com, which shows domain age alongside other signals.
  • Be extra careful with sites registered in the last few months, especially if they claim to be an "established" brand or a well-known retailer's outlet.
  • A young domain isn't automatically a scam — but it means every other check below matters more.

2. Find a real company behind the store

Legit businesses tell you who they are. Scroll to the footer and open the About, Contact and Terms pages.

  • Look for a full company name, a physical street address and a working phone number — not just a web form or a Gmail address.
  • Copy the address into a map app. Does it exist? Is it an office or warehouse, or a random house or empty lot?
  • Copy a paragraph from the About page into a search engine. Scam sites often reuse the same template text across dozens of storefronts.
  • Check that the company name in the Terms matches the store name. A fashion shop whose terms mention a totally different business is a classic template-shop giveaway.

3. Read reviews — off the site itself

Testimonials on the store's own pages can be written by anyone. What matters is what people say elsewhere.

  • Search the store name plus words like "reviews", "scam" or "never arrived".
  • Check independent review platforms and look at the negative reviews first: are complaints about slow shipping (annoying but normal) or about orders that never arrived and refunds that never came (a red flag)?
  • Be suspicious of a perfect five-star profile with many short, vague reviews posted in a short burst — that pattern often means fake reviews.
  • No reviews anywhere at all is itself a warning sign for a store claiming big sales volume.

4. Look at prices with a cold eye

The number one hook scammers use is a price that's simply too good. A €900 phone for €150, or an entire designer wardrobe at 80% off, is bait — not a bargain.

  • Compare the price against two or three major retailers. Discounts far beyond anything mainstream sellers offer should stop you.
  • Watch for fake urgency: countdown timers that reset, "only 2 left" on every product, permanent "closing down" sales.
  • Reverse-image-search a few product photos. If the same images appear on many unrelated stores, you're likely looking at a dropshipping front or a fake shop. This is especially common in fashion, where scam sites steal brand photography wholesale.

5. Check the payment options at checkout

How a store asks to be paid tells you a lot about how easily you can get your money back.

  • Safer: credit card and PayPal (goods-and-services), because both offer dispute and chargeback processes.
  • Risky: bank transfer, cryptocurrency, gift cards, or payment apps meant for friends and family. These are nearly impossible to reverse — and a store that only accepts them is a serious red flag.
  • Confirm the checkout page uses HTTPS (the padlock in the address bar). Note that the padlock only means the connection is encrypted — scammers use HTTPS too, so treat it as a minimum requirement, not proof of legitimacy.

6. Read the returns and shipping policies

Open the returns page before you buy, not after something goes wrong.

  • A real policy names a return window, who pays return shipping, and a physical return address. Vague lines like "contact us for returns" are a warning.
  • Check where returns actually go. Some shops look local but require you to ship returns overseas at your own cost, which can exceed the item's value.
  • Look for realistic delivery estimates. "Ships in 24 hours" with no carrier named, or delivery windows of 4–8 weeks on everyday items, both deserve scrutiny.

7. Verify the store's wider footprint

Real businesses leave traces everywhere; fake ones exist only on their own website and in paid ads.

  • Check their social media: a genuine account has a posting history and real customer interaction, not a page created last month with purchased followers and disabled comments.
  • If the store claims to sell a known brand, check that brand's official website for an authorized retailer list.
  • Well-known marketplaces have their own trade-offs too — you can read detailed community reviews of big platforms like Temu before ordering.
  • If you found the shop through a message, ad or email rather than your own search, paste that message into the HasTrust scam checker — unsolicited links are how most fake shops find their victims.

What to do if you already paid

Act fast. Contact your bank or card issuer and ask about a chargeback, or open a dispute in PayPal. Save screenshots of the store, your order confirmation and any messages. Report the site to your national consumer-protection agency and to the platform where you saw the ad. Then change your password if you created an account — especially if you reuse it elsewhere.

No single check proves a store is safe, and no single miss proves it's a scam. But a shop that fails two or three of these seven almost never deserves your card number. When in doubt, walk away — the "deal" will not be worth the fight to get your money back.

Frequently asked questions

How can I tell if an online store is legit?

Check the domain's age, look for a verifiable company name, address and phone number, read independent reviews off the site, compare prices against major retailers, and confirm the store accepts reversible payment methods like credit card or PayPal. A store that fails several of these checks is best avoided.

What are the biggest red flags of a fake online shop?

Prices far below every mainstream retailer, a domain registered only weeks ago, no physical address or phone number, payment only by bank transfer, crypto or gift cards, stolen product photos found on many other sites, and no reviews anywhere outside the store itself.

Is a padlock (HTTPS) enough to prove a website is safe?

No. The padlock only means your connection to the site is encrypted. Scam websites use HTTPS too, so treat it as a minimum requirement and still run the other checks — company details, reviews, policies and payment options.

What should I do if I already paid a scam website?

Contact your bank or card issuer immediately and ask about a chargeback, or open a dispute if you paid via PayPal. Save screenshots and order confirmations as evidence, report the site to your consumer-protection agency, and change your password if you reused it elsewhere.

Are new online stores always scams?

No — every legitimate shop was new once. But a young domain means you have less history to judge, so the other signals matter more: real contact details, independent reviews, realistic prices, clear return policies and safe payment methods.

Not sure about a specific shop?

Paste its name or web address and get a trust score in seconds — or paste a suspicious message into the scam checker.

Related checks

Browse all Scam & Legitimacy Checks checks →