Scammy storefronts are slicker than ever, but they still leave fingerprints. Here’s how to check any website in under five minutes and keep your card details out of the wrong hands.
Start With the Web Address, Not the Homepage
The URL is the fastest tell. Legit retailers own their exact-match domain, so Walmart lives at walmart.com, not walmart-deals-outlet.shop or walmartclearance.co. Scammers pad brand names with filler words like outlet, official, USA, or sale, and they lean on cheap top-level domains such as .shop, .top, .vip, and .cyou because they cost pennies and get abandoned fast. If the address bar reads like a keyword-stuffed ad, slow down.
Check the padlock, but never trust it alone. HTTPS and a lock icon only mean traffic is encrypted, not that the company is honest, and a free certificate takes about ninety seconds to get. What actually matters is how young the site is. Paste the domain into a free WHOIS lookup like ICANN Lookup or who.is and read the registration date. A “family business since 2009” whose domain was created three weeks ago is lying to you.
Watch for lookalike characters and buried subdomains too. Fraudsters swap a lowercase l for a capital I, add hyphens, or hide the real domain, so amazon.secure-checkout.com actually belongs to whoever controls secure-checkout.com, not Amazon. The true site is always the piece right before the .com. Hover over links in emails and texts before you tap, because the visible text and the real destination often do not match.
Vet the Company Behind the Checkout
Real stores are easy to reach, and fake ones hide. Scroll to the footer and look for a physical US address, a working phone number, and a support email on the store’s own domain, like [email protected] rather than [email protected]. Drop the address into Google Maps. If the “headquarters” turns out to be a vacant lot, a UPS Store, or a house in a quiet cul-de-sac, keep your wallet closed.
Read the About and Contact pages with a skeptical eye. Copy a sentence and paste it into Google inside quotation marks, because template scam sites recycle the exact same “our passion for quality” boilerplate across hundreds of storefronts. A missing About page, or one showing stock photos of a “team” you can reverse-image-search back to a photo library, means no real people stand behind it.
Now check the reputation off-site, where the seller cannot control the story. Search the store name alongside the words scam, reviews, and Reddit. A Better Business Bureau profile at bbb.org shows how long a company has operated and whether complaints cluster around undelivered orders. Trustpilot helps too, but read the one- and two-star reviews first, since a wall of five-star raves all posted on the same day is frequently bought.
Weigh the social proof honestly as well. A brand claiming to sell nationwide with 47 Instagram followers, comments switched off, and nothing posted more than a month ago is almost certainly a pop-up shop. Established sellers leave a long trail of posts, tagged customers, and mentions you did not have to take their word for.
Let the Prices and Policies Give It Away
If the deal feels impossible, it usually is. A $900 designer handbag or a current-gen console marked down to $79 is not a doorbuster, it is bait. Compare the price against the same item on Amazon, Walmart, Target, or the brand’s own site. Scam stores routinely advertise 80 to 90 percent off across an entire catalog, which no legitimate retailer can sustain. Real clearance is specific and limited, not sitewide and permanent.
Pressure tactics are a deliberate design choice on fraudulent pages. A countdown timer that resets when you reload, a fake “13 people are viewing this right now,” and a stock counter frozen at “only 2 left” for a week are all engineered to stop you from thinking. Honest retailers absolutely run sales, but they do not need a phony ticking clock to close you in ninety seconds.
Read the fine print before you ever reach payment. Look for a clear return policy with a real window, a stated shipping origin, and realistic delivery times. If everything ships in “12 to 30 business days” from an unnamed warehouse, you are probably buying dropshipped goods you could order yourself for less. Missing, blank, or copy-pasted Terms, Privacy, and Refund pages are a common thread across fake stores.
Pay in a Way That Protects You
The checkout page is your last and best line of defense. Legitimate US stores accept major credit cards through recognizable processors, so you should see Visa, Mastercard, PayPal, Apple Pay, or Shop Pay. If a site instead pushes you toward Zelle, Venmo “friends and family,” Cash App, a wire transfer, gift cards, or cryptocurrency, stop right there. Those methods are chosen precisely because the money is gone the instant you send it.
Favor a credit card over debit for anything unfamiliar. Under the Fair Credit Billing Act, credit card charges are disputable, and the funds are not yanked from your checking account while you fight it. A debit card hands a stranger a straw into your actual bank balance. Better still, generate a virtual card number through your bank or a service like Privacy.com and cap the spending limit, so a leaked number cannot be reused.
Look closely at the payment form itself. If the card fields suddenly load from a different domain than the store, or the page asks for your full Social Security number, your mother’s maiden name, or a bank login to “verify” you, close the tab. A genuine processor asks for your card number, expiration, CVV, and billing ZIP, and nothing more than that.
Slow down at the exact moment the site wants you to rush. Scam funnels are built to move you from product to paid in under two minutes. Take five instead: open a new tab, run the domain and seller checks above, and walk away if anything feels off. A real deal is almost always still there tomorrow, and the one that vanishes under scrutiny was never a deal.
Do a Two-Minute Digital Background Check
A handful of free tools can confirm a hunch fast. Run the store’s product photos through Google Lens or TinEye, because scam sites lift images straight from AliExpress, the real brand, or other shops. If the “exclusive” jacket shows up on fifty other domains, you are looking at a dropshipper or a fake. Paste the full URL into the Google Transparency Report Safe Browsing checker or into ScamAdviser to see risk flags and a trust score.
Cross-check the business name where it cannot be faked. Most US states let you search their Secretary of State business registry for free, and a company claiming years in operation should turn up somewhere. For anything involving supplements, health devices, or pricey electronics, a total absence of any official record is a loud warning.
Know your recourse before you spend a dime. If a store turns out to be fraudulent, report it at reportfraud.ftc.gov and dispute the charge with your card issuer, usually within 60 days of the statement date. Paying with a credit card is what keeps that door open. Save these steps somewhere handy, and the next too-good-to-be-true storefront earns three minutes of scrutiny instead of your card number.
