Before You Trust a Website
Quick things to check before entering your credit card or personal information.
Check the payment method
Trustworthy sites use established payment processors like Stripe, PayPal, or Square. You'll usually see their logos at checkout. If a site asks you to type your card number directly into a form they built themselves, that's a red flag. Your card info should be handled by a company whose entire job is keeping it safe.
The padlock isn't everything
That lock icon in your browser's address bar means the connection is encrypted. That's good, but it doesn't mean the site itself is legitimate. Scam sites can get encryption certificates too. Think of it like a locked mailbox -- it keeps others out, but it doesn't tell you anything about who owns the mailbox.
Look at the URL carefully
Scammers create sites that look like real brands but with slightly different addresses. Watch for misspellings (amaz0n.com), extra words (amazon-deals-shop.com), or weird subdomains (amazon.sketchy-site.com). If the URL looks even a little off, don't trust it.
"Looks professional" means nothing now
AI tools can generate a professional-looking website in minutes. A polished design used to be a signal of a legitimate business. That's no longer true. A beautiful site with perfect copy could have been spun up this morning by someone who has no intention of shipping you anything.
Check how old the site is
Brand new websites deserve extra scrutiny. Legitimate businesses usually have some history. If a site popped up last week and is already running huge sales, be cautious. You can check domain age through tools like Shield's scanner.
Search for reviews outside the site
Don't trust testimonials on the site itself -- those can be fabricated. Search for the company name plus "review" or "scam" on Google. Check the Better Business Bureau. Look for real people talking about real experiences.
Be wary of social media ads
That Instagram or TikTok ad for an amazing deal? The site behind it might have existed for 48 hours. Social media platforms don't thoroughly vet every advertiser. Run the URL through a security scanner before buying.
Watch for pressure tactics
"Only 2 left!" "Sale ends in 3 minutes!" "47 people are looking at this right now!" These urgency tactics are designed to make you skip the step where you think twice. A legitimate sale will still be there after you've verified the site is real.
When in doubt, scan it
If you're about to enter personal info or payment details on a site you're not 100% sure about, take 10 seconds to run it through Shield. It checks encryption, security headers, payment methods, reputation databases, and more. It won't catch everything, but it catches a lot.
If you already gave your info
If you realize you entered your card on a suspicious site, call your bank immediately and request a new card. Change passwords on any accounts where you used the same email/password combination. Monitor your statements for unexpected charges. Acting fast limits the damage.