Online shopping scams have quietly become the most common type of consumer fraud reported to the FTC. In a single recent year Americans lost more than $12.5 billion to fake storefronts, and the problem has only gotten sharper: AI-generated product photos, polished templates, and stolen brand identities mean a fraudulent store can look more professional than the real one. Knowing how to tell the difference takes about sixty seconds once you know what to look for.
The seven red flags that should make you close the tab
1. The domain was registered in the last ninety days
Scammers spin up new domains by the thousand every week. A free WHOIS lookup at whois.domaintools.com or whois.com will show you the registration date. If the site claims to be a ten-year-old brand but the domain was registered in March of this year, walk away. Some scammers buy aged domains to hide this, so pair the WHOIS check with the next flag.
2. Prices that don’t make economic sense
A $500 jacket for $79. A 90% discount on every item in the store. A new iPhone for $299. If the discount is so steep the brand would be losing money on every sale, you are not looking at a deal, you are looking at the bait. Real retailers run sales, but they do not run them on every SKU, every day, across the entire store. Pay attention to categories where retail margins are well known, like cosmetics, supplements, and sneakers. A 70% discount across the whole site is not a sale, it is a storefront.
3. Stock photos and AI-generated imagery everywhere
Look at the product photos and the about-us page. Reverse-image search a couple of them on Google or TinEye. If the same photo appears on dozens of unrelated stores, or if the team portraits look like they came out of a diffusion model (perfect teeth, weird earrings, backgrounds that do not line up, hands with six fingers), that is your signal. Real small businesses have real, slightly imperfect team photos, and real product catalogs use consistent lighting across shots.
4. No real company information
A legitimate store has a physical address, a working customer service phone number, and a real return policy. A scam site has a contact form and an email address at gmail.com or outlook.com. If you cannot find a corporate name, a registered business entity, or a real address that matches the country the company claims to be in, assume the worst. In the United States, the Secretary of State business search in the company’s home state is free and tells you whether the entity exists.
5. The checkout page feels off
Look at the URL bar when you reach checkout. If the address shifts to a different domain, or the address bar does not show a padlock, or shows a padlock on a misspelled domain like “amaz0n-secure.shop,” stop. Legitimate merchants keep you on their own domain throughout. Also watch for payment pages that do not use a recognizable processor (Stripe, Shopify Payments, PayPal, Square). Those are trust signals scammers often skip because the mainstream processors do review merchants. A site that rolls its own payment form and asks for your card number directly is asking for your card number directly.
6. They only take crypto, wire transfers, or Zelle
Credit cards and PayPal give you chargeback rights. Crypto, wire transfers, gift cards, and Zelle do not. If a store refuses anything but those payment methods, they are not being quirky. They are specifically avoiding the one tool you have to claw your money back. This is the single biggest red flag on the list. Even legitimate small stores will accept Venmo or Cash App, but they will still offer a card option. Stores that insist on wire or crypto only are not protecting you. They are protecting themselves.
7. Reviews that are too perfect
Five-star reviews posted in the same week, written in slightly broken English with the same cadence, often by reviewers with one review each. Check third-party sites like Trustpilot, SiteJabber, and the Better Business Bureau. If the store has no presence off its own domain, the reviews on-site are almost certainly fabricated. Real businesses accumulate messy, mixed reviews over years. Sort by negative reviews first. If there are none at all, that is suspicious.
What to do if you already placed an order
First, document everything: screenshots of the listing, the receipt, the order confirmation, and any emails. Then call your card issuer (the number on the back of the card, not one given to you by the seller) and dispute the charge as fraud. Under the Fair Credit Billing Act, you have up to sixty days from the statement on which the charge appeared to dispute it. If you paid through PayPal, open a dispute in the Resolution Center within 180 days. Do not wait for a tracking number that never arrives. The longer you wait, the weaker the dispute.
Also change the password you used on the site and anywhere else you reuse it. Most fake stores exist at least partly to harvest credentials, so treat the account as compromised even if the order resolves.
What to do if you already paid by wire or Zelle
Your options are narrower, but not zero. Call your bank immediately and ask them to attempt a recall on the wire. It is a long shot, but the first 24 hours matter. File a report with the FTC at reportfraud.ftc.gov, the FBI’s Internet Crime Complaint Center at ic3.gov, and your state’s attorney general. If the scammer is in the United States, law enforcement can sometimes seize funds, especially when other victims reported the same account. Recovery rates are low, but the report still matters: it creates the paper trail that triggers future enforcement.
The 60-second pre-check before any new site
Before buying from a store you have never used, run three quick checks: a WHOIS lookup on the domain, a reverse image search on one product photo, and a search for “[store name] scam” or “[store name] review” on Google. The third one is the most powerful. A real pattern of complaints surfaces fast, and a real store usually has a few Reddit threads or Trustpilot entries that predate today.
The honest bottom line
Fake stores are now good enough that even careful shoppers get caught. The point is not to never get fooled. It is to limit the damage. Use credit cards, not debit. Keep your browser’s password manager off unfamiliar sites. When something looks too good to be true, remember that the most expensive product in any scam store is not the thing you ordered. It is the thing you never receive, plus the hours you spend chasing a refund you should never have had to chase.
Photo: “Ecommerce Shopping Cart Abandonment Concept” by Zuko.io Images, via Wikimedia Commons, licensed under CC BY 2.0.
