1. Shop from a safe device
In order to stay safe while shopping online, it's critical that you're shopping on a safe device. Otherwise, when you transmit your personal information to complete your order, you risk that information being intercepted by hackers.
If you're shopping from your home computer, be sure that you've taken proper security precautions first. This includes keeping your browser and operating system up to date, installing anti-virus and firewall protection, and reconfiguring your Wi-Fi for maximum security.
If you're shopping from a mobile device, be sure you know how to keep your mobile phone secure. This includes keeping the operating system of your device up to date and staying off of public Wi-Fi.4 Instead, use a secure home Wi-Fi connection or the network connection from your phone's data plan.
In addition, if you're using an app rather than a website to shop from your mobile device, be careful about which apps you download: Scammers use copycat apps5 to grab your personal data, and it can be hard to tell the difference between a copycat and the real thing. The safest approach: download mobile shopping apps directly from the retailer's website.
2. Choose trustworthy sites
The safest sites to shop on are typically the big-name stores that have been selling online forever — and smaller local retailers you know directly who have moved online.
But sometimes the item you want — or the best deal on that item — is for sale on a site you've never heard of. How do you know if you should trust it?
- Look at online reviews. Do a search for the company name and reviews to see what comes up. Bad reviews or negative news stories about the company should send you shopping elsewhere. You can also check the Better Business Bureau website7 to see if there have been complaints filed about the company.
- Examine the website. Does the writing and design look professional? If not, that's a sign it may be a scam.
- Verify the company's contact info. If website lacks a physical address, a phone number, or an email address, that's a red flag. If there is contact info, call the number to make sure someone really answers, and pop the address into an online mapping tool to make sure the address actually exists. In addition, any U.S.-based company should be registered with whatever state they are located in. Verify the company's registration with the state. (If they aren't registered, shop elsewhere.)
- Make sure the site is secure before entering any personal information. In the URL bar, you should see HTTPS (the "s" means secure) instead of just HTTP. If you don't see the "s", anyinformation you send would not be sent securely.
3. Weigh every "deal" carefully
Before you decide to make a purchase, be sure to weigh every "deal" carefully. Here are some questions you should ask before you click "Place Order".
- If the deal arrived in your inbox, are you sure it's a legitimate offer? It could be a phishing email sent by scammers. If it's from a company you don't know, it's best to assume it's a scam and ignore it. Even if it's from a company you know, don't click on the email link; instead, go directly to their website. If there's a promotional code in the email, you can usually just copy it and paste it in when you check out.
- Is it really a "deal" after you factor in shipping costs?
- Are there any hidden catches, like a required monthly subscription?
- Is the item you're buying returnable — and does that matter to you?
- If returns are accepted, who pays for the return shipping?
4. Pay with a credit card
If an online store requires you to enter your bank account number, mail in a check, or pay by a wire transfer service like Western Union, do not place the order. Requiring these sorts of payments is a huge red flag.
It's always best to pay for online purchases with a credit card, since credit cards offer key protections that debit cards, prepaid cards, and gift cards don't. The Fair Credit Billing Act8 allows consumers to dispute fraudulent credit card charges — and limits your liability to no more than $50. Some credit card companies may offer you additional protection as well.
5. Guard your personal data
Don't give any online store more information than absolutely necessary.
- If you're filling out an online form, only fill out the required fields (those marked by an asterisk).
- Never give out your bank account number, driver's license number, or Social Security number.
- Not all shopping sites require you to set up an account to make a purchase. But if you do set up an account, be sure to choose a secure password — and opt for multi-factor authorization if it's available.