Fake checkout pages now copy real store branding closely enough that design alone won't give them away. The reliable tells are the URL structure, the payment methods offered, and how the site handles urgency — not how polished it looks.
In this article:
- Check the URL before the design
- Payment methods a legit store will (and won't) ask for
- Red flags in pricing and urgency tactics
- Verify the business actually exists
- What to do if you already entered your card number
- Browser and card tools that catch what you miss
Photo: Lorem Picsum, free to use.
Check the URL Before the Design
Look at the domain itself, not just the padlock icon (HTTPS is free and scam sites use it too). Watch for extra words or characters tacked onto a familiar brand name (like "nike-outlet-sale.com" instead of nike.com), and for domains that redirect through a different root domain once you reach checkout — a legitimate store's checkout page stays on its own domain from cart to confirmation.
The Payment Methods a Legit Store Will (and Won't) Ask For
A real retailer accepts standard credit or debit cards and typically PayPal or a similar processor. Treat a request for payment via wire transfer, gift cards, cryptocurrency, or a peer-to-peer app like Zelle as a hard stop — these are the payment rails scammers prefer specifically because they're difficult to reverse once sent.
Red Flags in Pricing and Urgency Tactics
Discounts of 70-90% off recognizable name-brand items, countdown timers that reset when you refresh the page, and low-stock warnings that don't match the item's actual popularity are manufactured urgency designed to short-circuit the URL and payment checks above. Real flash sales exist, but they rarely stack that many pressure tactics at once on a single product page.
Photo: Lorem Picsum, free to use.
Verify the Business Actually Exists
Search the store name plus "reviews" or "scam" in a separate tab before checking out, and check whether the site has a real physical address and working phone number in its contact page, not just a contact form. A domain registered within the last few months (checkable via a free WHOIS lookup) paired with no independent reviews anywhere is a strong combined signal.
What to Do If You Already Entered Your Card Number
Contact your card issuer immediately to flag the transaction and request a new card number — do this even if no charge has posted yet, since fraudulent charges often appear days later. Report the site to the FTC at ReportFraud.ftc.gov and, if you paid via PayPal or a similar processor, open a dispute through their resolution center rather than waiting to see if the item arrives.
Browser and Card Tools That Catch What You Miss
Browser extensions that flag newly registered or known-scam domains add a layer of automated checking beyond manual review. Virtual card numbers (offered by several banks and services like Privacy.com) let you cap a single transaction's limit and shut off the card number entirely after one use, which limits the damage even if a site turns out to be fraudulent.
Key Takeaways
- A padlock icon and polished design mean nothing — check the actual domain name and whether it changes at checkout.
- A request for payment by wire transfer, gift card, or crypto is close to a guaranteed scam signal for retail purchases.
- Search the store name plus "reviews" or "scam" before you buy, not after.
- Contact your card issuer immediately if you entered card details on a site you now suspect is fraudulent.
- Virtual card numbers cap your exposure even if a checkout page turns out to be fake.
FAQ
Is HTTPS enough to know a checkout page is safe?
No. HTTPS only encrypts the connection between you and the site — it says nothing about whether the site itself is legitimate, and scam sites use free HTTPS certificates just as easily as real stores do.
What payment methods should make me stop immediately?
Wire transfer, gift cards, and cryptocurrency for a retail purchase are the clearest red flags, since none of them offer the chargeback protection a credit card does.
How can I tell if a store's reviews are fake?
Look for reviews on independent platforms rather than only the store's own site, and be skeptical of a site with hundreds of five-star reviews but no reviews mentioning shipping times, sizing, or specific product details.
What should I do first if I think I paid a scam site?
Contact your card issuer to flag the transaction and request a replacement card number before doing anything else — this limits further damage while you handle disputing the charge and reporting the site.