How to Tell If an Online Store Is Legit: 12 Smart Checks 2026

Knowing how to tell if an online store is legit comes down to evidence the store does not control: an old domain, a real business address, working contact details, clear return terms, and reviews that live on third-party sites. A polished design and a padlock icon prove almost nothing on their own, so the checks below focus on what you can gather in a few minutes before you pay.

The twelve checks worth running before every unfamiliar purchase:

1. Read the web address character by character for typos and odd endings.
2. Look up the domain registration date in a WHOIS record.
3. Confirm the site uses HTTPS, while remembering what that does not prove.
4. Find a physical business address and search it on a map.
5. Test the phone number and email with a real pre-purchase question.
6. Locate the shipping, returns, refund, privacy and terms pages.
7. Read reviews away from the store, not the ones it posts itself.
8. Compare the price against what the same item normally costs.
9. Search the store name plus “reviews”, “scam” and “reddit”.
10. Run the URL through a safe browsing or reputation checker.
11. Refuse any payment method that cannot be reversed.
12. Place a small first order when the purchase is large or unfamiliar.

Two things decide most outcomes. Independent evidence, and whether you kept a payment method that can be pulled back. Get those right and the rest is detail.

What You Need

Before you start, have five things ready. You need the exact web address, typed or pasted rather than clicked from an ad, because a typo is itself a warning sign.

You need a phone or email address that is not linked to that store, so you can test the contact channels without handing over more personal information.

You need access to independent lookup tools: a WHOIS domain lookup, Google Safe Browsing, and reputation checkers such as Norton Safe Web or Scam Detector. All are free and run in a browser.

Finally, you need your payment method decided in advance. A credit card with a zero or low fee gives you chargeback rights; a debit card, gift card, wire transfer or crypto request gives you nothing. Choose the payment before you get emotionally attached to a bargain.

Step-by-Step: How to Tell If an Online Store Is Legit

Work through these in order. Each step is fast on its own and harder to fake than the last, so stopping early is fine if a step fails badly.

Step 1: Check the Store’s Identity and Website Quality

A legitimate store has a domain that was registered long before you found it, and a web address that matches the business selling to you.

Read the address slowly. Scammers use character substitution, swapping a letter o for a zero, adding extra words such as “official-deals”, or using endings like .top, .shop, .buzz and .xyz that real retailers rarely need. If the brand you searched for is nowhere in the domain, that is your answer.

Then look up the registration date. A WHOIS lookup shows when the domain was created. Six weeks old is a major red flag for a brand-new storefront selling discounted branded goods, and so is a domain registered the same week the ad started running.

Next, check that the site uses HTTPS and the address begins with https. Understand the limit here: a padlock only means the connection is encrypted. Free certificates take minutes to get, so a padlock proves nobody is reading your traffic in transit, not that the seller exists.

Finally, judge the site quality with suspicion. Broken buttons, odd grammar and reused product photos used to be reliable tells. They are not anymore, because cheap templates and AI-written copy make convincing pages cheaply. Clean design proves a small budget, not good intentions.

Step 2: Look for Clear Policies and a Real Business

Every established store publishes shipping, returns, refunds, privacy and terms pages, and those pages contain specifics a fake store cannot invent.

Open the footer and find all five. Read the returns policy for concrete answers: how many days you have to send something back, who pays return shipping, whether opened items can be returned, and what happens to a faulty item. A policy that only says “all sales final” with no way to contact anyone is an answer in itself.

Then look for business identity details: a legal company name, a registration or company number, and a physical address. Search that address on a map or in your country’s business registry. Matching the company name behind the address to the name on the website is a much stronger signal than the address existing, because scammers routinely use a registered agent’s office or a coworking address that belongs to a real business.

Step 3: Investigate Reviews and Independent Reputation

On-site testimonials are marketing, so judge the store by what people say on Google, Trustpilot, Reddit and social platforms where the store cannot delete a post.

Search the store name together with the words reviews, complaints and reddit. Read patterns rather than individual comments: are the negatives answered, are there complaints about a specific issue such as items never arriving or refunds refused, and has the volume of reviews been steady or did fifty appear the same week?

Warning signs in the review text itself include generic praise that could describe any business, reviews with no specific product mention, a profile with nothing but five-star comments, and a store that responds to criticism with anything other than an actual answer.

Keep one mechanic in mind: sellers can manufacture their own positive reviews with fake accounts, a practice called brushing. That is why a wall of glowing testimonials proves nothing, and why an absence of any criticism across every independent source is itself worth questioning.

Step 4: Test the Contact and Customer-Service Channels

A real business answers a specific question within a day. A fake one goes quiet, or answers vaguely.

Send something only a real seller could answer: the country a specific item is dispatched from, whether a warranty is included, or the height of a cabinet in the product photo. A template response that ignores the detail is not a pass. A helpful, specific answer is a strong one, especially if it matches what the listing page claims.

Check the channels too. A contact form alone is weak. A working phone number, a business email on the site’s own domain, and social accounts with a long posting history are much better. Run the phone number through a reverse lookup and search the address on a map to see whether it matches a company in that field.

One more test that costs nothing: if a live chat agent appears on a store with no other signs of legitimacy, ask them the same question twice in different words and see whether the answers stay consistent.

Step 5: Check Prices, Product Details, and Availability

If a branded item costs 70 to 90 percent below what it normally sells for, the price is the warning. Scammers anchor on prices people already know.

Search the exact product name to learn what the item normally costs from established retailers, then compare. Shoppers on Reddit describe doing exactly this, noting that a fragrance or pair of sneakers they have seen priced elsewhere had no business being available at a fraction of it. Discounts happen, but steady deep discounts on premium goods usually mean counterfeits, a bait-and-switch, or a card-testing scheme.

Check the listing details too. Specifications that contradict the brand, a description copied word for word from another retailer, availability that never changes, or a checkout that quietly swaps the item for a different one all point the same way.

Watch for pressure tactics while you read. Countdown timers that reset when you reload, claims of “17 people are viewing this”, invented recent order notifications and once-only discounts that reappear tomorrow are all designed to stop you from thinking.

Step 6: Choose a Safer Payment Method

Payment method is the decision that determines whether you can get money back, so decide it before the total appears.

Credit cards are the safest common option. Under card network rules, buyers can usually dispute a transaction and, in the US, federal law gives credit card holders up to 60 days to report a billing error. A debit card draws straight from your account and usually carries far weaker rights. Paying by credit card through a platform such as PayPal goods and services keeps a dispute path open too.

Walk away from gift cards, wire transfers, crypto, payment apps used to send to strangers, and PayPal marked friends and family. None can be reversed, which is the entire point for a scammer. If a seller insists on one of these after you ask why, you have your answer.

On marketplaces, be careful about the off-platform pivot. Sellers who move you into a private chat app and take payment directly remove the platform’s buyer protection entirely, and that is the exact moment forum readers report losing their money.

Step 7: Make a Small Test Purchase When Possible

When a store passes the earlier checks but you still feel unsure, buy the cheapest item they sell first.

A small order tests everything that matters at low cost: whether the item arrives, how long it takes, whether the packaging looks real, whether the tracking number resolves to a genuine carrier, and whether the returns process works when you need it.

Keep the order until you are sure. Most stores treat the first order as a trial, and going through the returns process once is the best proof a return policy is real. Then place the larger order with confidence.

Common Mistakes

The most common error is trusting a professional-looking site. A polished design used to mean an established business; now it means someone spent an hour and a small budget. Weight the objective evidence instead.

The second mistake is reading only the star rating. A 4.9 average tells you nothing about whether reviews came from real buyers, and sellers can generate their own. Open the individual reviews and look for specifics.

The third is paying before reading the policies. Unknown return terms and no refund address mean you have no plan if the item is wrong. Read them first, since they are free to read.

The fourth is letting a seller choose the payment method. Irreversible payments exist so that victims cannot get money back. Choose a credit card yourself and keep control of that decision.

The fifth is skipping independent research when the store is new. A domain registration date takes thirty seconds to check and rules out a large share of scam storefronts outright.

The sixth is trusting a link you arrived through. Ads, sponsored search results, text messages and email links are the front door for most shopping scams. Type the store name into the search bar yourself and enter the address manually.

One last habit worth building: never check out on public Wi-Fi, and turn on two-factor authentication on any account holding a saved payment method. It costs nothing and it removes an entire category of theft.

Frequently Asked Questions

Conclusion

Pause before you pay, then check the domain registration date and read the address character by character. Search for the store name with “reviews” and “scam” and read what people outside the store say.

Send one specific question to their support team and see whether a real person answers it accurately. Compare the price against what the item normally costs, and pay by credit card so you keep the right to dispute. If any single step leaves you uneasy, buy the cheapest item first and see whether it arrives as described.

That process takes a few minutes and answers the only question that matters: how to tell if an online store is legit before your money leaves your account.