Where the risk actually is
Most online purchases go smoothly. The problems that do occur fall into a few groups: stores that are not real, payment details that end up with the wrong people, and accounts taken over because of weak or reused logins. Knowing which is which helps you put effort where it matters.
Fake and misleading stores
Some websites exist only to take payment. They may copy the design of a known brand, advertise through social media or search results, and offer popular items at prices far below normal. After payment, nothing arrives, a cheap substitute arrives, or the shop disappears.
Warning signs include:
- prices that are far lower than everywhere else, especially for new or in-demand products;
- no clear business name, address or customer-service contact, or contact details that lead nowhere;
- vague or copied return and privacy policies;
- a web address that is slightly different from a well-known brand, which is the kind of thing covered in the guide to lookalike web addresses;
- reviews that are all glowing, repetitive or oddly worded;
- pressure such as countdown timers and “only two left” banners that never change;
- only unusual payment options such as bank transfer, cryptocurrency or gift cards.
A padlock in the browser means the connection is encrypted, not that the seller is honest. The browser padlock meaning is often misunderstood, so treat it as a minimum, not a reassurance. A practical guide to store legitimacy checks explains additional steps, such as searching for independent reviews and the business name together with words like “complaints.”
If a deal looks too good to be true, it is often worth buying from a seller you know instead, or waiting.
How card data gets exposed
Card details can be exposed in several ways, and many are outside your control:
- Fake checkout pages. A scam site or a page reached through a phishing link collects what you type.
- Data breaches at a retailer. A genuine company can be hacked, and stored card data or customer details may be taken. Checking whether your email has appeared in a breach is one way to learn this, and breach exposure checks are a reasonable habit.
- Compromised devices. Malicious software or a risky browser extension on your own device may capture what you type.
- Account takeover. If someone logs in to your shopping account with a reused password, saved cards and addresses may be at risk. This is one reason password reuse is a problem.
- Unsecured networks. Doing sensitive tasks on open Wi-Fi involves some risk, though modern encrypted sites reduce it. The details are explained in guidance on open hotspot risks.
Safer payment choices
No method is perfect, and the protections differ by country and provider, so check the terms that apply to you. In general:
- Credit cards often come with stronger dispute rights than other methods in many places, and a loss typically involves the card issuer’s money rather than money withdrawn from your bank account. Differences between credit and debit cards are discussed in the card protection differences article.
- Debit cards draw directly from your account, so a fraudulent charge can leave you short of cash while it is investigated, even if you are later refunded.
- Payment wallets and virtual card numbers can hide your real card number from the seller. Using virtual card numbers is one option, where your provider offers it.
- Payment services with buyer protection may help if an item does not arrive, within their rules and time limits.
- Bank transfers, gift cards, cryptocurrency and peer-to-peer apps are usually hard to reverse. They suit people you know and trust, not unfamiliar sellers, and payment app mistakes are a common source of losses.
Other habits help as well. Use a unique password for each shopping account, preferably through a password manager, and turn on two-step sign-in. Avoid saving card details with sellers you rarely use. Keep your device and browser updated. Turn on transaction alerts from your bank so unfamiliar charges are noticed quickly, and build a regular routine of statement review habits.
What to do if something goes wrong
The item never arrived or is not as described. Contact the seller first and keep copies of the order, messages and tracking details. If you get no answer, you can raise it with the payment provider. Many have time limits for disputes, so do not wait long.
You see a charge you did not make.
- Contact your card issuer or bank, using the number on your card or in their official app, as soon as you notice it.
- Ask them to block the card and issue a new one if needed. Explain which charges you do not recognize.
- Ask how to submit a dispute and what documents they need. Provide screenshots, receipts and a timeline.
- Keep checking your statements for a few months afterward.
- Change passwords on the shopping account and your email, especially if you reused a password.
Your protections and the time limits depend on your location, card type and the terms of your provider, and a refund is not guaranteed. If you suspect identity theft, see the broader guidance on identity theft. You can also report fake stores to your national consumer-protection or fraud-reporting service.
A short pre-purchase routine
Before you enter card details on a new site, ask: do I know this seller? Does the address look right? Are the contact details real? Is the payment method one I can reverse if needed? Is the price believable? A minute spent on these questions prevents most of the common problems.
This is general information, not financial or legal advice. For disputes, follow your own bank or card provider’s process.