How to Spot Red Flags Before Buying From an Online Store

A professional-looking website is not proof that a retailer is trustworthy. Scam stores can copy branding, use stolen product photos and create convincing social media adverts. A few checks before you pay can help you avoid losing money or sharing personal information with the wrong people.

Check the business identity and contact details

Look for a real business name, physical or registered address where appropriate, working contact method and clear customer-service information. Search the business name independently rather than trusting testimonials displayed only on the shop itself. Read the contact and returns pages to see whether they identify who is responsible for the sale.

A recently registered domain can be a reason to investigate further, but it is not proof of fraud. New legitimate businesses exist, and older websites can also be dishonest. Treat domain age as one clue among several, not a verdict.

Check photos, prices and product descriptions

Reverse-image search can reveal whether product photographs have been copied from another retailer or manufacturer. Compare the product name, model number and specifications against the original source. Be cautious when multiple unrelated shops use exactly the same unusual descriptions and images.

An extraordinary discount on a high-demand item deserves extra scrutiny. Check whether the price is plausible, whether the page uses constant countdowns and whether the description contains inconsistent brand names or copied text.

Read the policies before checkout

Check delivery times, returns, refunds, cancellation rights, warranty terms and who pays for return shipping. Vague or contradictory wording is a warning sign. For cross-border purchases, look for the seller's location and understand whether taxes or import charges may apply.

Search for independent reviews, but do not rely on star ratings alone. Look for detailed experiences across more than one site and pay attention to repeated complaints about missing deliveries, poor support or unexpected charges.

Use a payment method with meaningful protection

Use a payment method that offers dispute or buyer-protection procedures where available. Avoid paying an unknown seller by irreversible transfer, cryptocurrency or gift card. Confirm that the checkout address is the expected domain and do not follow payment instructions sent in unexpected messages.

If you suspect a scam, stop the transaction, contact your bank or payment provider quickly and preserve screenshots, receipts and messages. If you have reused a password, change it on the affected service and anywhere else it was used. Do not let a countdown timer rush your decision.

Remember that HTTPS is not a trust certificate

A padlock or HTTPS address means the connection is encrypted between your browser and the website. It does not prove that the seller is genuine, that the products are authentic or that an order will arrive. Scam websites can use encrypted connections too. Treat the padlock as a basic connection feature, not as a recommendation or business verification badge.

Open the site address carefully and look for misspellings, extra words or unusual domain endings that imitate a familiar retailer. Do not rely on a logo or a social-media advert. If an offer appears to come from a known brand, navigate to the brand's official website independently and see whether the same promotion is listed there.

Check seller identity and the consumer information

Look for the trader's legal or trading name, geographical address, working contact method, delivery costs, total price, returns information and warranty details. If the site hides who is selling the product or gives contradictory addresses, pause. Search the business name and the exact domain independently, and read detailed reviews from more than one source.

For many online purchases from traders in the EU, consumers have a 14-day withdrawal period after receiving goods, subject to exceptions. Cyprus's Consumer Protection Service explains the right and how to notify a trader. The exact rules can depend on the product, service and seller location, so read the official information rather than assuming every purchase can be returned in the same way.

Use payment methods that leave a route to challenge a problem

Be wary if an unknown shop insists on gift cards, cryptocurrency, direct bank transfers to an unrelated person or another method that is difficult to reverse. Use a familiar payment method with dispute procedures where available, and check the final payment page carefully before entering details. Do not share one-time banking codes with a seller or anyone who contacts you unexpectedly.

Save the listing, seller details, order confirmation, receipt and delivery promise. These records are useful if the item never arrives or is materially different from the description. Check whether the checkout is operated by the retailer or a recognised payment provider, and make sure the domain has not changed unexpectedly during the transaction.

What to do if you think you have been caught

Contact your bank or payment provider as soon as possible and ask what steps are available to block or dispute the payment. Change any password you reused on the site, enable multi-factor authentication where available and watch for follow-up phishing messages. If identity documents or sensitive personal information were shared, seek advice from the relevant authority about the appropriate next steps.

If you are in Cyprus, the Consumer Protection Service and European Consumer Centre Cyprus provide consumer information and complaint routes. Keep your communication factual and include the trader's details, payment evidence and order timeline. A calm record of what happened is more useful than replying to a scammer's threats or paying an extra fee to 'release' a refund.