How to Investigate an Online Store Before Ordering

Information to collect before investigating

Do the investigation before creating an account or entering a card number. If you reached the store through an advertisement, text, email, social-media post, or marketplace message, preserve that link and message too. A deceptive seller may operate many nearly identical domains, so research the exact domain rather than the brand name alone.

Fast warning signs worth checking immediately

Step-by-step online store investigation

1. Inspect the exact domain name

   Read the address from left to right. Criminals register look-alike domains using misspellings, extra words, hyphens, substituted letters, or an unexpected top-level domain. In shop.example.com, the registrable domain is normally example.com; the word before it is only a subdomain. Do not assume that a famous brand name appearing earlier in a long URL means the page belongs to that brand.

   Navigate independently to a known company by typing its established address or using a trusted bookmark. Avoid relying on the original advertisement or message link.

2. Check when the domain appeared

   Search the domain in ICANN Registration Data Lookup. The record may reveal creation and expiration dates, the registrar, nameservers, and registration status. Registrant details are frequently redacted or protected, so missing owner information is not proof of wrongdoing.

   Compare the domain age with the store’s claims. A domain created last month cannot support a website claim such as “serving customers online since 2008” unless the business can document a prior domain or offline history. A recent registration is a risk factor—not a verdict.

3. Search the store’s history on the web

   Search the exact domain and store name in quotation marks. Add terms that reveal customer experiences:

   • "example-store.com" scam
   • "Example Store" complaints
   • "support@example-store.com" refund
   • "555-0100" order
   • "123 Main Street" online store

   Review result dates. A store may have changed owners, and scammers sometimes reuse an abandoned business name. Search older results and cached snippets when available, but do not treat the absence of complaints as evidence that a new store is safe.

4. Identify and verify the legal business

   Look in the footer, privacy policy, terms, return policy, invoice, and checkout page for a legal company name. Search that name in the relevant Secretary of State or corporate registry. The U.S. Small Business Administration explains how state registration works.

   A registration shows that an entity was filed; it does not certify product quality, solvency, or honest conduct. Compare the official record’s status, formation date, jurisdiction, and registered name with the store’s claims. Be cautious when the website, payment recipient, and registered company all use unrelated names without explanation.

5. Verify the street address, phone, and email

   Search each contact detail separately. View the address on a mapping service and, where available, street imagery. Determine whether it appears to be a retail location, office, residence, vacant lot, mailbox store, warehouse, or unrelated business. A home office or mailbox can be legitimate; the problem is a false claim about what is located there.

   Call the number before a costly order. Ask a specific product or return question. Search the phone number and email to see whether they appear under other store names or in complaints. Do not send identity documents merely because a seller requests “verification.”

6. Read the policies as evidence

   Do not settle for seeing links labeled “Shipping,” “Returns,” and “Privacy.” Read them. Check the order-processing time, delivery range, carrier, tracking promise, return window, condition requirements, return address, who pays return shipping, restocking fees, refund method, cancellation rules, warranty, and exceptions for sale or personalized goods.

   Search a distinctive sentence from the policy in quotation marks. The same text appearing on many unrelated stores may indicate a template or copied site. Templates are common and not inherently deceptive, but leftover names, foreign addresses, conflicting deadlines, or references to unrelated products suggest poor control or impersonation.

7. Reverse-search product photos and descriptions

   Use Google Lens or Bing Visual Search on the main product image and distinctive crops. Search an unusual sentence from the description in quotation marks. You may discover the manufacturer, an established listing, a stock-image source, a much cheaper wholesale product, or another seller whose entire page was copied.

   Using supplier images is normal in some retail models. The concern is a store claiming that copied photographs show its own workshop, inventory, staff, or original design—or using images of a different product than it intends to ship.

8. Evaluate reviews outside the store

   On-site testimonials are controlled by the seller. Search independent platforms, social-media comments, consumer forums, marketplace profiles, and local sources. Read the newest critical reviews and the seller’s responses. Look for recurring facts such as non-delivery, fake tracking, counterfeit goods, unexpected subscriptions, refusal to provide a return address, or an item shipped from a country not disclosed before purchase.

   Review patterns matter. A sudden flood of short praise, repetitive language, reviewer accounts with little history, irrelevant product references, or ratings that sharply disagree between platforms can indicate manipulation. Complaints can also be mistaken or malicious, so seek a pattern with transaction-specific detail.

9. Check security and malware warnings

   Confirm that checkout uses HTTPS and that your browser shows no certificate or dangerous-site warning. You can check the domain with Google Safe Browsing’s site-status tool. A warning is a strong reason to leave. A clean result does not certify the merchant; a newly created or low-traffic scam may not yet be flagged.

   The padlock is not a trust seal. HTTPS helps protect information in transit, but dishonest sites can obtain certificates. Never install unusual software, browser extensions, remote-access tools, or “payment security” apps at a seller’s direction.

10. Examine prices, inventory, and claims

    Compare the total price—including shipping, taxes, recurring charges, and add-ons—with several established sellers. Ask whether the discount is commercially plausible. Check authorized-dealer lists for branded products, especially electronics, luxury goods, collectibles, replacement parts, supplements, and event tickets.

    Look for contradictions: every scarce item is “in stock,” reviews predate the domain, the About page names a different country, or a supposed manufacturer provides no model number, specifications, warranty terms, or safety information.

11. Inspect the checkout and payment recipient

    Before submitting payment, confirm the item, quantity, shipping address, delivery estimate, total cost, currency, renewal terms, and merchant name. Avoid a seller that changes the price late in checkout or diverts payment to a private account with instructions to mislabel the transaction.

    The Federal Trade Commission’s online-shopping guidance recommends checking refund and shipping terms and paying by credit card when possible. Be especially cautious if the only choices are gift card, wire transfer, cryptocurrency, cash, or another method designed to be difficult to reverse.

12. Save evidence and minimize your exposure

    Save the product page, seller identity, policy pages, advertised delivery date, complete price, order confirmation, messages, and payment record. Note the date and time. Use a unique password; do not reuse a banking or email password. Provide only the information required to complete and deliver the order.

    For an unfamiliar seller, consider a low-dollar first order only if the rest of the evidence is reassuring. A small order is not risk-free: the seller still receives your contact and payment information.

Free resources and official databases

What the investigation can reveal

• Whether the domain is established or very recent.
• Whether business-age claims conflict with domain or registration dates.
• Whether contact details connect to a real and consistent business identity.
• Whether photos, descriptions, policies, testimonials, or trust badges appear copied.
• Whether customers report a recurring pattern of non-delivery, counterfeits, or refund problems.
• Whether the advertised seller and actual payment recipient appear connected.
• Whether checkout offers a payment method with meaningful dispute options.
• Whether the website is currently flagged for malware or deceptive activity.

The research can reduce uncertainty, but it cannot guarantee delivery, product quality, future conduct, solvency, or the safety of every transaction.

How to make the final ordering decision

Do not reduce the investigation to a single automated score. Weigh the evidence in categories:

Accuracy limitations and common research mistakes

• New does not mean fraudulent. Legitimate stores can have new domains and limited review histories.
• Old does not mean safe. Domains can be sold, compromised, or repurposed.
• Registration is not approval. Business filings, trademarks, and tax numbers do not guarantee honest sales practices.
• HTTPS is not an endorsement. It protects the connection, not the buyer from the site operator.
• Complaint counts lack context. Large companies naturally generate more complaints; patterns and resolution matter.
• Reviews can be manipulated in both directions. Paid praise and malicious complaints both exist.
• Addresses can be legitimate but nontraditional. Small stores may use homes, coworking spaces, registered agents, or fulfillment centers.
• Automated reputation tools can lag. Brand-new scams may be unlisted, while repaired sites may retain old warnings.
• Copied material has multiple explanations. Authorized distributors may share manufacturer content; impersonators may copy entire stores.

Record both evidence for and against legitimacy. Confirmation bias can make a bargain look safe after you have decided that you want it.

What to do if you already ordered

1. Save the advertisement, product page, policies, promised delivery date, order confirmation, messages, and payment record.
2. Contact the seller in writing and request a specific resolution. Keep the message and response.
3. Monitor the payment account for the expected charge, altered amount, recurring charges, or unfamiliar transactions.
4. Contact the card issuer or payment provider promptly if the seller fails to deliver, sends materially different goods, or makes an unauthorized charge. Ask about applicable dispute deadlines.
5. If you reused a password, change it on every account where it was used, starting with email and financial accounts. Enable multifactor authentication where available.
6. Report suspected fraud through ReportFraud.ftc.gov. Internet-enabled crime can also be reported to FBI IC3. Contact your state consumer office or attorney general when appropriate.
7. If identity information was exposed, follow the recovery plan at IdentityTheft.gov.

Privacy and lawful-use warning

Minimize the data you give a store. Do not provide a Social Security number, banking password, payment verification code, remote computer access, or identity-document image for an ordinary retail purchase unless a specific lawful need is independently verified. Review the store’s privacy policy to understand collection, sharing, retention, and deletion practices.

Frequently asked questions