How to check whether an online store is legitimate

A polished website does not automatically belong to a trustworthy retailer. Scam stores can copy the branding, product photos and payment pages of genuine businesses, then disappear after collecting money or personal information. Before entering card details, take a few minutes to verify who operates the store and how it handles orders.

This matters in Australia, where shoppers regularly buy from local retailers, overseas marketplaces and social media advertisements. A store may display prices in Australian dollars while shipping from another country, or use an Australian-looking name without having a real Australian business presence.

The safest approach is to examine several signals together rather than relying on one feature. A padlock, professional design or five-star review can be helpful, but none proves that a seller is legitimate.

A reliable check covers the business identity, website address, contact options, payment process, returns policy and reputation. If important information is missing or a deal feels unusually urgent, pause before proceeding.

Check the business identity

Look for the store’s legal business name, Australian Business Number, physical address, phone number and customer service email. An ABN can be checked through the Australian Business Register. If a company claims to be Australian but provides only a web form or a generic email address, treat that as a warning sign.

Search the business name separately from its website. Results from ASIC, established retailers, news reports or consumer forums can help confirm whether the company exists. Be careful with businesses that use names similar to well-known brands, especially when the spelling or web address differs by only one character.

A genuine local retailer usually explains where it operates and how orders are fulfilled. Check whether the address leads to an actual shop, office or warehouse using mapping services. A Melbourne or Brisbane address that points to a residential property is not automatically suspicious, but it deserves closer examination when combined with other gaps.

Inspect the website and its domain

Read the web address carefully before clicking through to checkout. Scammers often register domains containing extra words, hyphens or slightly altered brand names. An address ending in “.com.au” can suggest an Australian connection, but it is not a guarantee of legitimacy. Overseas operators can use Australian-style branding, and fraudulent websites may imitate a real domain through paid search advertisements.

Check that the website uses HTTPS and that the browser displays a valid security certificate. This protects information while it travels between your device and the site; it does not confirm that the business itself is honest. A secure connection can exist on a fake store.

Look for consistent details across product pages, the About page, delivery information and checkout. Poor grammar, copied descriptions, mismatched logos, broken links and images with visible watermarks may indicate a rushed imitation. A store selling current game consoles, popular sneakers or limited-edition collectibles at dramatically below-market prices deserves particular caution.

Review policies, prices and customer feedback

A legitimate retailer should clearly state delivery timeframes, shipping charges, returns conditions, warranty arrangements and refund procedures. Australian businesses selling to local consumers generally need to follow Australian Consumer Law, including consumer guarantees for acceptable quality and products that match their description. A policy saying “all sales are final” cannot remove every legal consumer right.

Check whether the return address is in Australia or overseas, and identify who pays return postage. Some websites advertise low prices but add expensive shipping at checkout or make returns impractical. Compare the final cost with prices from familiar retailers such as JB Hi-Fi, Officeworks, Chemist Warehouse or major department stores.

Treat reviews carefully. Look for feedback across independent platforms rather than relying only on testimonials displayed by the store. A large number of short, repetitive reviews posted within a narrow period may be manufactured. Searching the store name with terms such as “scam”, “complaint” or “refund” can reveal patterns that product ratings hide.

Examine checkout and payment options

A trustworthy checkout should show the final amount, delivery details and merchant name before payment. Avoid entering card information if the page suddenly redirects through several unrelated domains, displays aggressive countdown timers or asks for unnecessary information such as your banking password, full identity documents or a one-time security code.

Prefer payment methods that provide dispute options, such as a credit card or a recognised service such as PayPal. Be especially wary of requests for direct bank transfer, cryptocurrency, gift cards or payments to a personal account. These methods can be difficult to reverse once the money has been sent. “Bank transfer only” is a significant risk for an unfamiliar retailer.

Check the payment page on both desktop and mobile. If you use keyboard navigation or need a clearer way to move through forms, accessibility shortcuts may help you inspect fields and links without overlooking important checkout details. Never save card information on a site you have not yet verified, and do not reuse a password that protects your email or banking accounts.

Confirm the store through independent sources

Search for the business on Google Maps, social media and Australian consumer protection resources, but distinguish genuine activity from copied profiles. A real retailer often has a history of customer interaction, consistent contact details and posts that extend beyond a few promotional images. New businesses can still be legitimate, so the absence of a long history should prompt additional checks rather than an automatic accusation.

For Australian websites, review Scamwatch guidance and search for reports involving the store, its phone number or its payment details. Check whether social media advertisements lead to the same domain shown on the company’s established profiles. Scammers frequently create temporary pages for Facebook or Instagram promotions, particularly around Boxing Day, Black Friday and major sporting events.

Consider the shopping context as well. A seller offering unavailable concert merchandise after a major event, unusually cheap imported electronics or “last chance” products through a pop-up advertisement may be exploiting urgency. Genuine promotions usually provide ordinary payment options, clear stock information and a usable returns process.

Save screenshots of the product page, advertised price, delivery promise and order confirmation. Keep emails, receipts and tracking details until the item arrives and any return period has passed. If a suspected scam has already received your payment details, contact your bank promptly, change reused passwords and report the matter to Scamwatch.

The most dependable check is a short pause before checkout: verify the business identity, inspect the domain, read the policies, compare the price, choose a protected payment method and search independent sources. If two or more warning signs appear, leave the site and buy from a retailer whose identity and customer protections can be independently confirmed.