Frequently asked questions about website and online store trustworthiness
Online store and website trust
How can I tell if an online store is trustworthy?
Look for clear business information (company name and physical address), contact options (phone and email), and standard payment methods (major credit cards, PayPal). In the U.S., check the business registration at the state Secretary of State site and look up the business on the Better Business Bureau and consumer review sites. Requests for unusual advance payments, money transfers, or gift cards for ordinary purchases are warning signs. If you want to report a scam or check guidance, see FTC and IC3 resources.
How do I know if a website is trustworthy?
Trustworthy sites display ownership and contact details, a privacy policy, and clear terms. They often have consistent branding and independent user reviews. Note that HTTPS (a padlock) only means the connection is encrypted — it does not prove the site's legitimacy. Many malicious sites use HTTPS as well.
What does 'trustworthy website' mean?
It means the operator is identifiable, the site uses appropriate security and privacy practices, and business operations (shipping, returns, customer service) are transparent and verifiable.
How to recognize a trustworthy website?
Check for HTTPS, visible company contact details, independent customer reviews, and documented policies. In the U.S., verify the business via the Secretary of State registry and check BBB records. If these are missing, be cautious.
*Remember: HTTPS is necessary but not sufficient — many scam sites also use HTTPS.
Connection and browser security
How do I know the browser uses a secure connection?
The padlock icon and 'https://' in the address bar mean the connection is encrypted with TLS. That protects data in transit but does not prove the site's legitimacy.
Is HTTPS secure?
HTTPS encrypts traffic between you and the site, which is important. But HTTPS does not verify whether the site operator is trustworthy.
Is the page safe?
Check HTTPS, business and contact info, independent reviews, and whether the site appears in threat or complaint lists. Aggressive pop-ups, very slow load times, and requests for unusual payment methods are warning signs.
Scam sites and scam messages
What is a scam website?
A scam website is built to trick visitors into giving personal or financial information or sending money. They may impersonate legitimate companies or government sites. Report scams to FTC and IC3 and consider notifying the BBB.
How to spot a scam site?
Look for typos in the URL, missing or fake contact details, odd payment requests, grammar mistakes, and pressure tactics. Verify the business registration, BBB record, and independent reviews before buying.
Are 'scam page' and 'scam website' the same?
Yes — both refer to web content designed to defraud visitors.
User experiences — what to know
Users often share experiences on forums, social media, and review sites. Search for '[site name] review' before ordering. You can also check and report scams on BBB Scam Tracker. TrustRatingOnline collects user reports to make it easier for others to check a site.
I ordered from a scam site — what can I do?
Contact your bank or card issuer immediately — call the number on the back of your card or your statement to report the transaction and ask to freeze or close compromised cards or accounts. File a complaint at ReportFraud.ftc.gov and, if it involved cybercrime, file with the FBI IC3. Also consider filing a complaint with your state Attorney General and report the scam to BBB Scam Tracker to warn others. Acting quickly gives banks and card issuers the best chance to reverse charges.
I replied to a scam message — what now?
If you disclosed banking credentials or account numbers, call your bank right away. Banks commonly advise customers to block or close compromised accounts and dispute unauthorized transactions. If the compromise was a password for a social account, change the password and enable two-factor authentication. If you clicked a link, scan your device for malware. Report the incident to FTC and IC3 as appropriate. See specific bank guidance for how to report suspicious communications.
How to spot a scam message?
Typical signs: urgency, poor spelling/grammar, requests to click links or provide personal info, suspicious sender addresses. Do not follow links in suspicious emails; instead, type the official site address into your browser. Be aware that criminals sometimes imitate official reporting portals — always check the URL carefully.
Reporting scams in the United States
How do I report a scam site?
Key U.S. reporting channels:
- FTC — report at ReportFraud.ftc.gov for consumer fraud and deceptive practices.
- FBI IC3 — file a complaint for cyber-enabled crimes and internet fraud.
- BBB Scam Tracker — report to warn other consumers.
- USA.gov 'where to report' — helps you find the right agency by category and location.
- Your state Attorney General — for local consumer protection enforcement (search your state's AG website).
Should I report scam messages?
Yes. Reporting helps authorities identify patterns and protect other consumers. File reports with the FTC, IC3 (for cybercrime), BBB, and your state AG as appropriate.
If you’ve been scammed — bank and recovery tips
What do U.S. banks typically advise?
While procedures vary across banks, common immediate steps recommended by major U.S. banks include:
- Contact your bank or card issuer immediately using the phone number on the back of your card or on official statements. Many banks provide dedicated fraud numbers.
- Ask the bank to block or freeze the affected card/account and to monitor or reverse unauthorized charges.
- If you received a suspicious message claiming to be from your bank, forward it to the bank’s abuse or phishing address (for example, Bank of America’s instructions include forwarding suspicious emails to abuse@bankofamerica.com). Do not click links in those messages.
- Change account passwords and enable two-factor authentication on at-risk accounts. Consider closing or replacing compromised cards.
- File consumer reports with FTC and IC3 and keep documentation for disputes and law enforcement.
Notes on recovery and law enforcement
Reporting quickly helps financial institutions and law enforcement act. The FBI emphasizes filing IC3 reports for cyber-enabled crimes to help investigations. Also be aware of scams impersonating official reporting sites — always go directly to known government URLs.
Experiences and individual cases
Is store XXX trustworthy?
User reviews can reveal a lot. Search our site, BBB, and independent review sites to see what other customers say. If you don't find the store in our database, please add it via 'Add a website for review' so others can benefit.
If you’ve been scammed — immediate actions
What to do if you’re scammed online
Follow the recommended steps from your bank and consumer protection agencies: contact your bank or card issuer immediately, file a report at ReportFraud.ftc.gov, file an IC3 complaint if the scam was cyber-enabled, report to BBB Scam Tracker, and consider filing with your state Attorney General. Keep records of all communications and transaction receipts.
If you suspect an online store is unsafe, check whether it’s already listed on our site here.
Further reading and official resources
FTC — ReportFraud (file a consumer fraud report).
FBI IC3 — Internet Crime Complaint Center.
USA.gov — Where to report scams.
IdentityTheft.gov — recovering from identity theft..