You found a product at a price that seems almost too good. The site looks polished, the reviews are glowing, and the checkout button is right there. Before you click it, spend ten minutes running through these checks — they’ve caught real scams that cost real people hundreds of dollars.

Why does a good-looking website mean almost nothing?

A convincing storefront can be built in an afternoon. Platforms like Shopify make it trivially easy to launch a site with professional product photos (often lifted from legitimate retailers), a clean layout, and even a fake live-chat widget. Scammers know that most people equate visual polish with trustworthiness, so they invest in appearances while cutting every corner that actually matters — like having real inventory, a real address, or any intention of shipping your order.

What you’re looking for in this check isn’t how the site looks; it’s whether the operational details hold up. A scam site almost always collapses under five minutes of actual scrutiny. The goal here is to apply that scrutiny systematically.

How do I check how old the domain actually is?

Go to ICANN’s WHOIS lookup tool and type in the store’s domain name. The “Created” date tells you when the domain was registered. A store claiming to have been in business since 2015 but showing a domain registered eight months ago is lying about its history — full stop. Scam operations frequently register new domains after old ones get flagged, so a domain under one year old selling discounted electronics, designer goods, or pet supplies at steep discounts deserves extra skepticism. Legitimate niche retailers do launch new domains, but that fact alone should push you to verify harder through the other steps below.

What does the business address tell me?

Scroll to the footer and find the physical address. Copy it into Google Maps and switch to Street View. You’re checking whether it’s a real commercial space or a residential house, a vacant lot, a UPS Store mailbox, or — one of the most common tricks — a prestigious-sounding address that turns out to be a virtual office service. A store listing “1600 Pennsylvania Ave NW, Washington DC” as its headquarters isn’t just suspicious; it’s a signal they didn’t even try. If there’s no address at all, that’s disqualifying on its own; legitimate businesses are legally required to disclose contact information in most US states.

While you’re at it, check whether a phone number is listed. Call it. A disconnected line, a voicemail that never gets returned, or a number that connects to a generic answering service are all red flags. Legitimate small retailers answer their phones or call back within a business day.

How do I read the fine print without reading all of it?

You don’t need to read every word — you need to find three specific policies: returns, shipping, and privacy. For returns, look for the return window (anything under 14 days is restrictive), who pays return shipping, and whether refunds go back to your original payment method or only as store credit. For shipping, check whether they list realistic delivery timeframes and whether they name actual carriers. Vague language like “delivery in 7–45 business days via international logistics” usually means the goods are dropshipped from overseas with no real tracking and no accountability if they don’t arrive.

The privacy policy is often overlooked but revealing. A real privacy policy names the company, explains what data is collected, and references applicable law (like the California Consumer Privacy Act or GDPR if they serve EU customers). A policy that reads like it was generated wholesale, references a different company name than the store, or is copied word-for-word from a template without customization tells you the operator didn’t put in the bare minimum of legitimate effort.

Can I trust the reviews on the site itself?

Almost never, in isolation. On-site reviews are entirely controlled by the store owner. What you want are reviews on platforms the store doesn’t control. Search for the store name on Google followed by “reviews,” then check Trustpilot, the Better Business Bureau (bbb.org), and Reddit. On Reddit specifically, search the store name in r/Scams and r/Fraud — those communities document active scams quickly and in detail. If the only positive reviews you can find live on the store’s own product pages, treat that as an absence of evidence, not evidence of trustworthiness.

Pay attention to review patterns too. A store with 400 five-star reviews posted within a two-week window is almost certainly running a review farm. Legitimate review accumulation is uneven — a mix of ratings, spread over months and years, with detailed and specific language. Generic praise like “Great product! Fast shipping! Will buy again!” repeated across dozens of accounts is a manufactured signal, not a real one.

What’s the fastest way to check if the product photos are stolen?

Right-click any product image and select “Search image” (Chrome) or “Search the web for image” (Safari). Google’s reverse image search will show you where else that photo appears online. If the same image shows up on AliExpress, Alibaba, or another retailer at a completely different price point, you know the store is either dropshipping without disclosing it or outright reselling goods they don’t own. Neither is automatically a scam, but dropshipping without disclosure is deceptive, and it often means the product you receive won’t match the listing — or won’t arrive at all.

What payment methods tell me about a store’s legitimacy?

This is one of the clearest signals. Legitimate stores accept major credit cards and often PayPal, Venmo, or Apple Pay. Credit cards give you chargeback rights — if the goods don’t arrive or are materially different from what was described, your card issuer can reverse the charge. A store that accepts only wire transfers, Zelle, cryptocurrency, or gift cards is explicitly choosing payment methods that cannot be reversed. That is not a coincidence. It is a deliberate design choice to make recovery impossible once your money is sent.

Even if a store accepts credit cards, check whether the checkout page uses HTTPS (look for the padlock icon in the browser address bar). An unencrypted checkout page in 2024 is inexcusable and means your card data may be transmitted insecurely. Most modern browsers will warn you, but double-check before entering any financial information.

Is there a quick way to see if this store has been flagged anywhere official?

Yes. The FTC’s consumer information site maintains updated guidance on active scam types and lets you file and search complaints. You can also search the store’s name in the FTC’s complaint database. Beyond that, your state attorney general’s office often maintains a list of businesses under investigation or subject to consumer protection actions — a quick search of “[your state] attorney general consumer complaint” will get you there. These tools won’t catch every scam, especially new ones, but a store that’s already been reported will often show up.

What if everything checks out but something still feels off?

Trust that instinct and keep digging. Some of the most effective scam sites pass the surface checks because the operators have gotten good at mimicking legitimacy. A few additional moves: search the store’s exact return policy text in quotes in Google — if it returns dozens of other stores using the identical language, that policy was mass-copied and likely never enforced. Look for a social media presence and check when those accounts were created and how the followers engage. A Facebook page with 12,000 followers but posts that get two likes is a purchased audience, not a real community.

You can also try emailing their customer service with a simple pre-sale question before ordering. Ask something specific, like whether a product ships from a US warehouse or overseas. A legitimate business answers within 48 hours with a direct response. A scam operation either won’t reply, will send a canned non-answer, or will give you a response that doesn’t actually address what you asked. The quality of that interaction predicts the quality of every interaction that follows.

What’s the single most important thing to remember?

The burden of proof is on the store, not on you. You don’t owe an unfamiliar website the benefit of the doubt. If a store can’t demonstrate a real address, real contact information, real reviews off its own platform, and a payment method that gives you recourse — any one of those gaps is enough reason to walk away. There are tens of thousands of legitimate online retailers competing for your business. The ten minutes you spend on this check will cost you nothing. Skipping it can cost you a lot more.