A shopper holding a credit card over a laptop — pause and check the store before you pay.
A fake shopping website is designed to look like a real store just long enough to take your money, because it copies familiar layouts, steals product photos, and offers prices that feel like a lucky find.
Some of these sites never send anything at all, while others send a cheap imitation, a wrong item, or nothing more than a tracking number that never moves.
Learning to spot them before checkout is far cheaper than trying to recover a payment after it has already left your account.
This guide walks through ten red flags used by the United States Federal Trade Commission and other consumer protection agencies, plus the exact checks you can run in a few minutes.
You do not need any technical skill to use them, and you do not need to memorize them all, because even two or three warning signs together are usually enough reason to walk away.
When a store feels wrong, trust that feeling and verify the seller somewhere other than the store itself.
Key Highlights
Price is the first filter. A brand-name product offered far below every other retailer is the most common bait used by fake stores, so compare the price with at least two well-known sellers before you believe the discount is real.
Domain age exposes invented histories. A free WHOIS or ICANN RDAP lookup shows when a domain was actually registered, which quickly contradicts a store that claims ten years of trading on a domain created last month.
Payment method is the safety net. Credit cards and trusted checkout services give you a dispute path if the order never arrives, while gift cards, wire transfers, and cryptocurrency payments are almost impossible to recover once sent.
Contact details must be real and testable. A genuine business lists a physical address, a working phone number, and a monitored email address, and you should be able to find that business mentioned somewhere other than its own website.
Reviews must exist outside the store. Testimonials shown only on the checkout site itself prove nothing, so search the store name together with words like complaint or scam and read independent review platforms before paying.
Reporting still matters after a loss. If you already paid a fake store, contact your bank or card issuer immediately, then report the site to ReportFraud.ftc.gov and to the FBI Internet Crime Complaint Center at ic3.gov.
10 Red Flags That Expose a Fake Shopping Website
1. Prices far below every other seller.
A genuine retailer can run a sale, clear old stock, or sell a refurbished model at a discount, but it cannot routinely sell current brand-name products at a fraction of the price charged everywhere else.
Scammers use impossible prices because they work, pulling shoppers past their normal caution and into a fast checkout before they stop to compare or research the store.
If the same phone, sneaker, or appliance costs roughly the same at three trusted retailers and one unknown site offers it for half that amount, treat the outlier as a warning rather than a bargain.
Always compare the total checkout price, not just the headline figure, because fake stores often hide their real cost in shipping fees that only appear at the last step.
Read the product description closely as well, since words like refurbished, vintage, or closeout can signal that the item is not new, even when the photos suggest otherwise.
A deal that only makes sense if the seller is losing money on every order is not a deal at all, and it is usually the first sign that no genuine product will ever arrive.
2. A brand-new domain claiming a long history.
Fake stores are often built in a day, run for a few weeks, and then abandoned once complaints pile up, so their domains tend to be very recently registered.
A free WHOIS lookup, or the ICANN RDAP lookup that became the definitive source for generic domain registration data, shows the creation date, the registrar, and sometimes the registrant behind a website.
If a store claims to be an established brand with years of happy customers, yet its domain was registered a few weeks ago, that contradiction alone is reason to stop.
Domain age is not proof by itself, because every legitimate new business starts with a new domain, but it becomes powerful when combined with other warning signs on this list.
Also check whether the domain name closely imitates a famous brand with a swapped letter, an extra word, or an unusual ending, since lookalike domains are a classic impersonation trick.
Paste the address into Google Safe Browsing site status or a reputation scanner such as VirusTotal as a second check, while remembering that a clean result does not guarantee safety for a site nobody has reported yet.
3. No real contact details anywhere on the site.
A real store wants you to reach it when a parcel goes missing, so it publishes a physical address, a phone number, and an email address that actually gets answered.
Fake stores do the opposite, offering only a web contact form, a generic free email address, or no contact page at all, because answering customers costs time and creates a trail.
Test the details you do find by searching the address and phone number separately, since scammers often copy a real address from an unrelated business or invent one that does not exist.
Be especially careful when a store lists only a social media account or a messaging app handle as its customer service channel, because those accounts can vanish as quickly as the website itself.
A missing returns address is another serious warning, since you cannot return a faulty item to a business that has nowhere to send it back to.
If you cannot verify who runs the store, where it operates, and how to reach a human being, you are not dealing with a retailer you can hold accountable.
4. Missing, vague, or copied policies.
Every legitimate online store explains how returns, refunds, shipping times, and privacy work, because those terms protect both the buyer and the seller in a normal transaction.
Fake stores either skip these pages entirely, fill them with a few meaningless sentences, or copy them word for word from another website without changing the business name.
The United States Federal Trade Commission notes that sellers must ship by the time they promise, or within 30 days if no shipping time is promised, so a store that refuses to state any delivery timeframe is already breaking basic expectations.
Read the returns policy before you buy, and look for specifics such as who pays return postage, how long refunds take, and whether restocking fees apply to your order.
Copy a suspicious sentence from the policy page and search for it in quotes, because a copied policy will often appear on several unrelated scam sites at once.
If the policy contradicts the homepage promises, is written in broken or machine-translated language, or cannot be found at all, close the tab and buy the same product from a retailer with clear terms.
5. Only risky payment methods are accepted.
The payment options a store accepts reveal more about its honesty than almost anything else on the page, because scammers choose methods that cannot easily be reversed.
The Federal Trade Commission warns shoppers never to buy from sellers who insist on gift cards, wire transfers, a payment app, or cryptocurrency, since those payments are designed to be final once they are sent.
A legitimate store, by contrast, accepts credit cards or trusted checkout services that give buyers a formal way to dispute a charge.
Paying by credit card is the strongest protection available to most shoppers, because you can dispute a charge for goods that never arrived, arrived damaged, or did not match the description, and ask the card issuer to investigate while the payment is on hold.
Debit cards offer less protection in many cases, since the money leaves your bank account immediately and recovery depends on your bank's own rules.
If a store refuses cards entirely, pushes you to pay a private individual, or offers a large extra discount only for wire or crypto payment, treat that demand as a deal-breaker.
6. A padlock icon treated as proof of trust.
Many shoppers have been taught to look for a padlock and an address starting with https before entering payment details, and that advice is still useful as far as it goes.
The problem is that https only means the connection between your browser and the site is encrypted, not that the business behind the site is honest, and scammers can obtain encryption certificates for their fake stores in minutes.
The Federal Trade Commission makes exactly this point, warning that encryption protects the connection rather than proving the seller is legitimate.
Check the full domain name character by character instead of glancing at the padlock, because impersonators rely on tiny changes that are easy to miss at a glance.
Watch for misspelled brand names, added words like outlet or clearance, hyphens in odd places, and unfamiliar domain endings attached to a famous name.
A browser warning that a site is not secure, or that its certificate does not match the address, is a hard stop rather than a suggestion, and you should never enter card details on a page that triggers one.
7. Reviews that only exist on the store itself.
Fake stores love five-star testimonials, because they control every word on their own pages and can invent hundreds of happy customers in an afternoon.
Real reviews live elsewhere, on independent platforms, search results, forums, and social media, where unhappy buyers can also speak freely and the store cannot quietly delete criticism.
Search for the store name together with the words complaint, scam, or reviews, and compare what you find across several sources instead of trusting a single star rating.
Look for patterns rather than individual comments, since clusters of five-star reviews posted on the same day with near-identical wording are a classic sign of fabricated feedback.
The Federal Trade Commission also warns that fake reviews can cut both ways, because dishonest competitors sometimes plant fake negative reviews, which is another reason to weigh many sources rather than one page.
A store with no independent footprint at all, or with detailed complaints about non-delivery and silence from customer service, has already told you everything you need to know.
8. Aggressive pressure to buy right now.
Countdown timers, flashing banners about a sale ending in minutes, and claims that only two items remain are powerful sales tools, and scammers use them to stop you from doing the checks described in this guide.
A real retailer may run a genuine limited promotion, but it will not punish you for taking ten minutes to verify the store, compare prices, and read the returns policy.
When every element of a page screams urgency, that urgency is usually the product being sold, because a calm shopper is a scammer's worst enemy.
Fake scarcity often comes with other manipulation tricks, such as popups claiming that dozens of people just bought the same item, or warnings that your cart will expire within seconds.
Reload the page or visit it again the next day and watch whether the countdown simply resets, which exposes the timer as decoration rather than a real deadline.
Step away from any store that makes you feel rushed, and remember that a genuine bargain will still be available after a short verification check.
9. Stolen images, sloppy language, and inconsistent branding.
Fake stores are assembled quickly, so they steal product photos from real retailers, reuse logos at the wrong size, and mix brand names, currencies, and contact details that do not belong together.
Product descriptions are often copied, badly translated, or filled with vague superlatives that say nothing concrete about size, materials, warranty, or what is actually included in the box.
A legitimate retailer invests in consistent branding and accurate descriptions, because returns and complaints cost it real money when listings mislead buyers.
Reverse image search is a fast way to test suspicious photos, since a stolen hero image will often lead back to the real brand, a marketplace listing, or several unrelated stores using the same picture.
Also look at the site as a whole, checking whether the footer, social links, and legal pages point anywhere real, or whether social icons simply reload the homepage.
Spelling errors alone do not prove a scam, but combined with stolen images and contradictory branding, they paint a clear picture of a storefront built for speed rather than service.
10. A checkout that asks for far too much.
A normal checkout needs your name, shipping address, payment details, and an email address for the receipt, and it should never ask for information that has no role in delivering a parcel.
Be deeply suspicious if a store requests your social security number, your bank login, a photo of your identity card, or access to your email account before it will process an order.
Legitimate companies do not collect sensitive identity documents through a shopping checkout, and any store that does is either harvesting data or setting up a later fraud.
Also watch what happens after you pay, because a real store sends an order confirmation with an order number, an itemized receipt, and a tracking link once the parcel ships.
Fake stores often send nothing at all, send a vague thank-you message with no order number, or provide a tracking number that never updates on the carrier's own website.
Save every receipt, email, and screenshot from the checkout, since that paper trail becomes your evidence if you need to dispute the charge or report the store later.
What to Do If You Already Paid
Act immediately, because speed is your greatest advantage when a payment can still be stopped, reversed, or flagged before the scammer moves the money onward.
Contact your bank or card issuer first and explain that you paid a fraudulent website, then ask about disputing the charge and whether the payment can be recalled or placed on hold.
Keep the store name, website address, order date, amount paid, payment method, and every email or screenshot connected to the order, since your issuer will ask for exactly those details.
Next, report the fraud to the Federal Trade Commission at ReportFraud.ftc.gov, where your report helps investigators spot patterns and take action against scam operations even though the agency does not resolve individual cases.
File a separate report with the FBI Internet Crime Complaint Center at ic3.gov, including how you found the store, how you were asked to pay, and the full transaction details, because that center is the federal intake point for internet crime.
The FBI also warns that the real IC3 never contacts victims by phone, email, or social media to ask for payment, so anyone claiming to recover your money for a fee is running a second scam.
Watch your statements closely for the following weeks, because a card number handed to a fake store can be tested with small charges or sold onward to other fraudsters.
Ask your card issuer whether a replacement card makes sense, change any password you reused on the fake site, and turn on transaction alerts so new charges reach you instantly.
If the store collected identity documents or account logins, consider placing a fraud alert or credit freeze with the major credit bureaus and reviewing your credit reports for accounts you did not open.
Frequently Asked Questions
Is a website safe if it shows a padlock and uses https?
No, and this is one of the most dangerous misunderstandings in online shopping, because https only encrypts the connection between your browser and the website.
A scammer can set up encryption for a fake store just as easily as a real retailer can, so the padlock tells you nothing about who runs the site or whether your order will ever arrive.
Treat the padlock as a minimum requirement for entering payment details, never as evidence that a store is trustworthy on its own.
Can I get my money back after paying a fake store?
Recovery depends almost entirely on how you paid, which is why payment method matters so much before checkout rather than after it.
Credit card payments give you the best chance through a formal dispute, while debit payments depend on your bank's rules and wire transfers, gift cards, and cryptocurrency are very difficult to recover once sent.
Contact your bank or card issuer immediately, gather your receipts and screenshots, and report the fraud, because acting quickly always improves your chances.
How do I check whether an online store is legitimate?
Run the checks in this guide together rather than relying on any single signal, starting with a price comparison, a domain age lookup, and a search for independent reviews and complaints.
Verify that the store lists a real address and working contact details, read its returns and shipping policies, and confirm that it accepts credit cards or trusted checkout services.
If several checks raise doubts, buy the same product from a retailer you already trust instead of gambling on an unknown store.
Should I report a fake shopping website even if I lost nothing?
Yes, because reports are how enforcement agencies and browser protection services learn about new scam stores before they reach more victims.
A report to ReportFraud.ftc.gov or ic3.gov takes only a few minutes, and you can also report the site through your browser or to the platform where you saw the advertisement.
Your single report may be the one that connects a store to dozens of other complaints and triggers action against the whole operation.
Safe online shopping is mostly a habit, not a technical skill, and it comes down to pausing before payment, verifying the seller somewhere independent, and paying in a way that protects you if something goes wrong.
The ten red flags in this guide take only a few minutes to check, and they will save you from the vast majority of fake stores you will ever meet.
Share them with family and friends as well, because the people most often targeted by these scams are simply the ones who have never been shown what to look for.