How to Check if a Website Is Legit Before You Buy: 10 Simple Checks

You found the exact thing you wanted. The price looks fine. The photos look great. But you've never heard of this website, and your card is right there.

Good instinct to stop. A few minutes of checking now can save you a lot of trouble later.

How Can You Tell if a Website Is Legit?

If you're asking "is this website legit?", 

here's the quick answer⁶ no single check proves it. Not the padlock. Not the reviews. Not a nice-looking design.

What works is looking at several clues together. One unusual detail might have a harmless explanation. Several problems appearing at the same time are a good reason to slow down and investigate before you pay.

Below are 10 checks for how to check if a website is legit before buying. Most take about a minute.

The 3-Level Website Check

Every check fits one of three questions:

Identity: Who is behind the website? (Checks 1–3)

Reputation: What do independent sources say? (Checks 4–5)

Transaction: What happens if you give them your money? (Checks 6–10)

A site that gives you reassuring answers across all three areas gives you more evidence to work with than one that passes only one. A pretty site with no identity, no independent reputation and only strange payment options has failed the whole test, however good it looks.

1. Check the Website Address Carefully.

Start with the web address at the top of your browser. 

Scammers love addresses that look right at a glance.

Spelling tricks. A domain might replace a letter with a number or use two letters that look like another letter at a glance.

Extra words. A domain can add words such as “official,” “outlet,” “deals,” or “sale” to make it look connected to a familiar brand. Don't assume the extra words mean the site belongs to that brand.

Domain endings. .shop, .store, .top and other domain endings aren't automatically bad. Look at the entire web address and make sure it actually matches the business you're trying to visit.

If you arrived from an ad or message, don't trust the link. The advises going to the company's website through a page you know is official, not through the ad. Search the brand's name yourself and see which address comes up.

An older domain has existed for longer, but that doesn't automatically mean the current website or owner is trustworthy. A new domain isn't automatically a scam either.

Every website address is registered on a certain date. You can look it up for free at ICANN Lookup (lookup.icann.org). Type in the address and find the "creation date."

An older domain has existed for longer, but that doesn't automatically mean the current website or owner is trustworthy. A new domain isn't automatically a scam either.

A brand-new address is not automatically a scam. Real shops open all the time.

The real clue is a mismatch. A site claiming "family-owned since 1998" on an address registered last month is strange.

Hidden owner names are common and prove nothing. Domain age is one clue, not a verdict.

3. Find Out Who Is Behind the Website.

A real store should tell you who it is. Look for a company name, a real street address, a phone number, an email, an About page, and terms and privacy policies. Suggests confirming the seller's physical address and phone number before you buy.  

Then check that the details make sense together. Does the address exist on a map? Does the About page match the rest of the site?

A free Gmail address isn't proof of a scam. Plenty of tiny, honest shops use one. But a big-looking store with no address, no phone number and only a Gmail contact deserves more questions.

4. Search for the Company Outside Its Own Website.

A store will always say nice things about itself. So ask someone else.

Search the company or product name with words like "review," "complaint" or "scam," and see what other people say. Try the exact web address too. Look at consumer sites, forums and news stories.

Finding nothing isn't proof of a scam. But for an expensive purchase, it's a reason to slow down.

5. Look at the Reviews, But Don't Trust Them Blindly

Reviews can be fake, bought or copied. Look for patterns instead of trusting any single one.

Check more than one place. A store's own reviews are the easiest to control.

Look at timing. Dozens posted within a few days might be a warning sign, or just a big sale.

Look for detail. Do people say what they got and how it arrived?

Click the reviewer. Is this their only review ever?

Read the bad ones. Watch for the same complaint again and again, like "never arrived."

No single sign proves a review is fake. Real people write short reviews too. And good reviews, on their own, are never proof a store is legit.

6. Be Careful When the Price Looks Too Good

Everybody loves a deal. Scammers know that. Unusually low prices are a sign of a scam, and steeply discounted name-brand goods might be fakes.

Watch for unusually large discounts, strong pressure to buy immediately, or claims such as "only 2 left!" appearing across many products.

Compare the price with several established sellers. If one unfamiliar store is dramatically cheaper than everyone else, take a closer look before paying.

But sales are normal, and a low price alone doesn't prove fraud. What matters is whether the price fits everything else. Cheap plus a brand-new address plus no contact details is a very different story from a cheap price on a known store's clearance page.

7. Read the Shipping, Return and Refund Policies.

Yes, it's boring. It also tells you what happens if something goes wrong. The suggests checking the total price, the expected delivery date, and the refund policy, including who pays return shipping and whether there's a restocking fee. 

Look for:

Clear shipping times. For U.S. online purchases, if a seller doesn't state a shipping time, the seller generally must ship within 30 days after receiving the order and payment.

A return window with a number of days.

Refund rules: full refund, or only store credit?

A return address in your country.

Fees you didn't expect.

Be wary of policies that are missing, vague or obviously copied.

8. Check How the Website Wants You to Pay.

How you pay matters as much as who you pay.

Credit cards can provide important protections for U.S. consumers. The FTC recommends paying by credit card when possible because you may have dispute rights if something goes wrong with an online purchase. If you're charged twice or never receive your order, contact your card issuer and ask about your dispute options. For certain credit-card billing disputes, federal law generally requires your written dispute to reach the card issuer within 60 days of the first statement showing the error. Contact your card issuer as soon as you notice a problem. (Consumer Advice) 

Debit cards work differently. Different protections apply, though some debit card issuers offer extra protection voluntarily.

Payment methods that deserve extra caution include gift cards, wire transfers, cryptocurrency and some payment apps. The FTC says never to buy from online sellers that insist on only those ways of paying. Payments made this way can be difficult to reverse or recover, especially if something goes wrong. 

Notice the word "insist." A store that accepts crypto and cards isn't automatically bad. A store that will only take gift cards is a different story. On a marketplace, don't buy from anyone who asks you to pay outside the marketplace's payment system.  

9. Does HTTPS Mean the Website Is Safe?

Not exactly. This is one of the most common mix-ups.

HTTPS is the "s" in https://, and it's why many browsers show a padlock. It means the connection between your device and the website is encrypted. That means scrambled, so someone snooping can't read your card number as it travels. That's useful, and the FTC does say to make sure sites use encryption when you enter payment information.

But HTTPS doesn't tell you whether the company is real, whether it will ship your order, or whether the owner is honest. Think of it as a private tunnel. The tunnel is secure, but it doesn't tell you who's waiting at the other end. Getting HTTPS is easy, so scam sites can have it too.

If a page asks you to enter sensitive information and doesn't use HTTPS, stop and investigate before entering it. But having HTTPS does not prove that the business behind the website is legitimate. Scam websites can use encrypted connections too. More in [Can a Scam Website Have HTTPS?].

10. Check the Website Before You Enter Your Card Details.

Now put the clues together. Ask yourself:

Do the address, age and company details fit together?

Did independent sources back the store up?

Do the price, policies and payment options seem reasonable?

Several "no" or "not sure" answers mean don't buy yet. A quick fake website check now is much cheaper than waiting for a package that never comes. If you do go ahead, use a credit card.

For a deeper look, see [How to Check a Website Before Entering Your Credit Card]. If the store found you through an ad, try [How to Tell if an Online Store Is Legit From a Facebook Ad]

What if Everything Looks Legit?

Good. That lowers your risk. It doesn't remove it.

A scammer can copy a real-looking address, write believable reviews and get a padlock. And sometimes a real business just does a bad job. No checklist can guarantee a site is safe.

So match your effort to the risk. For a small purchase, a quick check may be enough. For something expensive, take more time and keep your records. If several things don't add up, don't let a sale or countdown pressure you into buying. Step away and investigate further. There will always be another store. Buying from an individual instead? See [How to Check if an Online Seller Is Legit] .

What If You Already Bought From a Suspicious Website?

Don't panic. Move quickly.

Save everything. Keep receipts, order emails, screenshots and messages. Receipts and confirmation emails can help you get money back from the seller or file a dispute with your card company. 

Contact your card issuer or bank as soon as possible. Tell them what happened and ask what dispute or fraud-protection options apply to your situation. Don't let a slow back-and-forth with the seller delay you from contacting your payment provider.  

Report it. The FTC takes reports at ReportFraud.ftc.gov. Report it as soon as possible. Reporting can help authorities track scams and may support efforts to address fraud, but it does not guarantee that you'll get your money back.(Consumer Advice) (Consumer Advice)

Watch your statements for charges you don't recognize.

Full guides: [What to Do if You Bought Something From a Scam Website]([ARTICLE LINK]) and [How to Report a Scam Website]([ARTICLE LINK]).

The 60-Second Website Legitimacy.   

         Checklist

Screenshot this one.

Identity

☐ Address has no typos, extra words or lookalike spelling

☐ Domain age matches the site's story

☐ Real company name, address, phone and email

Reputation

☐ Searched "[site name] review / complaint / scam"

☐ Reviews on other sites, not just the store's own

Transaction

☐ The price makes sense

☐ Clear shipping, return and refund policies

☐ A payment method with appropriate consumer protections is available

☐ The seller isn't insisting on gift cards, wire transfers, cryptocurrency or another difficult-to-reverse payment method

☐ HTTPS is there, but I'm not treating it as proof

Stop and investigate further if: several things don't add up, the seller insists on difficult-to-reverse payment methods, or you're being pressured to buy immediately.

              Final Takeaway  

You can't prove a website is legitimate from one clue alone. But you can make a much better-informed decision by checking who is behind it, what independent sources say, and what happens if you give the seller your money. If several things don't add up, don't rush. Stop, investigate and decide only when you understand what you're dealing with.