Websites · 9 min read

How to Check a Suspicious Website Before Buying

How to review an unfamiliar online store: domain spelling, registration context, contact details, policies, reviews, payment methods and browser warnings.

What a website check can and cannot settle

Checking a website is about gathering context, not reaching a verdict. Nothing you can observe from the outside proves a shop will ship your order. What you can do is find out how much of the site is verifiable — a real business name, a working address, policies that make sense, a domain with history — and how much is simply asserted.

Work through the checks below, then judge the whole picture against the amount you are about to spend and the payment method you would use.

Read the address bar carefully

Spelling and lookalike domains

Compare the domain character by character with the brand you expect. Common tricks include a swapped letter, an added hyphen or word, a doubled letter, or a different ending such as .shop or .store attached to a well-known name. Also check what comes before the first single slash — that is the real domain. A long address containing a brand name in the path or as a subdomain tells you nothing about who owns the site.

HTTPS and the padlock

HTTPS means the connection between your browser and the site is encrypted. It says nothing about who runs the site or whether they will honour an order. Certificates are free and available to anyone, so a padlock is a minimum expectation rather than a mark of trust. Its absence on a page asking for payment or login details, however, is a good reason to leave.

Redirects

Notice if the address changes after you click through — from the link you were sent to a completely different domain, or from the shop to an unrelated payment page. A checkout hosted on a domain with no connection to the store is worth questioning before you enter card details.

Domain registration context

Public registration records (WHOIS or RDAP lookups, available through many free tools) often show when a domain was first registered. A domain registered very recently is normal for a genuinely new business, and common among short-lived fraudulent shops — so it raises the amount of other evidence you should want, particularly for larger orders or for a brand that claims years of trading.

Old domains are not automatically trustworthy

Expired domains get bought and repurposed, and long-established sites are sometimes compromised. Age is one input, never a clearance.

Business identity and contact information

Look for a real, checkable identity: a legal business name, a street address, a phone number, and a support email on the site's own domain rather than a free mailbox. Then test one of them. Search the address to see whether it is a warehouse, a residential property or an unrelated business. Call the number. Look up the company name in the business registry for the country it claims to operate from.

Missing contact information is one of the most consistent warning signs, because a shop that intends to handle returns needs a way for customers to reach it.

Policies, product text and pricing

Return and refund policies

Read the returns, shipping and refund pages rather than noting that they exist. Watch for policies that contradict the checkout, impossible timelines, addresses in a different country than claimed, or text that still refers to another shop's name.

Copied product descriptions and images

Paste a distinctive sentence from a product page into a search engine, and reverse image search a product photo. Widespread reuse of manufacturer text is normal for resellers, but a whole catalogue lifted from another retailer, combined with thin contact details, is a different picture.

Unrealistic discounts

Sitewide discounts of 70–90% on current, in-demand products, countdown timers on every page, and stock counters that reset when you reload are designed to compress your decision. Compare a few items against mainstream retailers to see whether the pricing is plausible at all.

Outside evidence

Independent reviews

Search the domain name with words like "review" or "complaint", and read reviews on sites the shop does not control. Look at timing and specificity: dozens of five-star reviews posted in a single week, all short and generic, carry less weight than a handful of detailed ones spread over months.

Browser and security warnings

If your browser, operating system or security software warns you about a site, treat that as a strong signal and do not click through it. The reverse does not hold: a clean result only means the site has not been flagged yet, which is often the case for shops set up days ago.

Payment methods at checkout

The checkout tells you a lot. Card payments and mainstream payment providers carry dispute rights. A site that only accepts bank transfer, cryptocurrency, gift cards, or asks you to send money to a named individual has removed the mechanism you would use to get your money back. If you do proceed, prefer a method with a chargeback path and keep the order confirmation.

For a wider view of payment warning signs, see red flags to check before sending money.

Why a professional design proves nothing

Templates, stock photography and hosted store platforms make a polished storefront cheap and quick to build. Design quality reflects budget and tooling, not intent. The same is true of trust badges, "verified" seals and review widgets placed on the site itself — they are images the site owner chose to display, unless you can click through to the issuing service and see the listing there.

Website checklist

Before buying from an unfamiliar site

  • Read the domain character by character and confirm what sits before the first slash.
  • Check HTTPS is present, and remember it only protects the connection.
  • Look up the domain's registration date for context, not as proof.
  • Find a business name, address and phone number, then verify one of them independently.
  • Read the returns and refund policies for contradictions or another shop's name.
  • Search a distinctive product sentence and reverse image search a product photo.
  • Compare a few prices with mainstream retailers.
  • Search for reviews on sites the shop does not control.
  • Stop if your browser or security software warns you.
  • Pay with a method that has a dispute path, and keep confirmation emails.

Related guides

Browse all payment safety guides

These guides provide general information only. They do not guarantee that a transaction, seller or website is safe or fraudulent, and they are not legal, financial or law-enforcement advice. Before You Pay is an automated risk assessment tool, not a bank, credit bureau, seller-verification service or official fraud authority.