How to check a website is safe before you buy or pay

1. Read the address, not just the shop name

A website can copy a familiar retailer’s logo, colours and photographs. Start with the address bar at the top of your browser, rather than the name shown on the page. On a phone, tap the address bar to see more of the address.

Look for misspellings, swapped letters or extra words that make an address look familiar. A brand name appearing somewhere in the address does not mean the brand owns the site.

If you arrived through a text, email or advert, open a fresh browser tab. Find the retailer independently and compare the addresses. Sponsored search results are adverts, not proof that a seller has been checked.

2. Understand what HTTPS actually tells you

HTTPS means the connection between your browser and the website is encrypted. This helps protect information while it travels. Depending on your browser, you may see a padlock or another site-information symbol.

It does not prove that the person running the website is honest. A fake shop can use HTTPS too. Treat an encrypted connection as a basic requirement for entering payment details, not a stamp of approval.

If your browser warns that the connection is not private, stop rather than clicking past it. The cause might be a technical fault, but you should not enter passwords or card details until it is resolved.

3. Check who you would actually be buying from

Look for a business name, contact details, delivery information and a clear returns policy. Check whether these agree across the contact page, terms and checkout. A contact form alone gives you little to verify.

Search the business name and address independently. If the shop claims to be a UK limited company, you can check its details through Companies House. Registration confirms that a company exists; it does not prove the website belongs to it.

Approval logos can also be copied. If a seller claims membership of an approval scheme, check the scheme’s own directory. Compare the listed business details, not just the name.

4. Look beyond the reviews on the website

Reviews displayed by the shop are only part of the picture. Search independently for the seller’s name alongside words such as “reviews”, “refund” or “delivery”. Look for patterns across different sources rather than relying on one rating.

Detailed accounts of deliveries, returns and customer service are more useful than repeated praise with no explanation. Notice whether reviews actually discuss the shop you are checking, rather than another business with a similar name.

A new or small shop may have few reviews. That does not automatically make it unsafe. It means you have less evidence, so the seller’s identity and payment protection deserve more attention.

5. Pause when the offer or checkout feels pressured

Compare the price with a few established sellers. A bargain is not proof of a scam, but a much lower price needs an explanation. Check the item’s condition, delivery charges and where it will be sent from.

Countdown timers and “last chance” messages are sales tactics, not reasons to skip checks. You can close the page and think. Check delivery times and return costs before committing.

Be cautious if checkout asks you to install software, allow remote access or give unrelated personal information. A shop does not need control of your computer to take payment. Leave if the process changes into instructions to move money elsewhere.

6. Choose a payment method with a route to help

For an unfamiliar seller, prefer a card or a payment service that offers buyer protection. Read the conditions: protection varies, and not every purchase qualifies. Some credit-card purchases have additional legal protection.

Be wary of requests for bank transfers, cryptocurrency, gift cards or personal payments intended for friends and family. These can leave you with fewer ways to recover your money. A discount for avoiding the normal checkout is a reason to pause.

A recognised payment logo can be copied, so it is not enough by itself. Keep your order confirmation, receipt and a copy of the product description. These can help if the goods do not arrive or are not as described.

7. Make one final check before confirming

Keep your browser and device updated, and leave their built-in security warnings switched on. Antivirus can help spot some harmful pages and downloads, but it cannot guarantee that a seller will fulfil an order.

Before you confirm payment, work through this short check. If an answer is unclear, stop and investigate rather than filling in more details.

• Does the address still match the shop or payment provider you expected?
• Does the total include the delivery charge and match what you agreed?
• Can you identify the seller and understand the returns process?
• Does any banking approval request show the amount and recipient you expected?
• If you need an account, have you chosen a password you do not use elsewhere?

8. If you have already entered details or paid

If you suspect fraud after entering card details or making a payment, contact your bank or payment provider promptly. Use its official app or the number on your card, not contact details supplied by the suspicious website. Explain what happened and ask about securing the card and disputing the payment.

Save receipts, messages and screenshots. If you reused a password, change it wherever else you used it. Start with your email account if it shares that password.

If you installed software or allowed remote access, disconnect the device from the internet. Use another device to contact your bank. A technician can help check the computer before you use it for payments again.