Is this store real? Checklist before you pay

Before you pay, you need to know who gets your money—not just whether the site looks polished. Scammers copy themes and reviews. This guide gives you a fast five-minute checklist so you can complete the order with confidence.

Start with: Can I open proof outside the store? A trust badge with a link to live status beats a static icon. See a checked store example to know what honest merchants show.

Start with the domain and URL

Look at the address bar carefully. Scammers register domains that resemble famous brands — swapped letters, extra hyphens, or wrong top-level domains. Bookmark the official site of brands you buy from often so you do not rely on search ads that may lead to impersonators.

Check how long the domain has existed using a public WHOIS or domain-age tool. Very new domains selling high-demand goods at steep discounts are a recurring scam pattern. That does not mean every young store is fraudulent — many legitimate merchants launch fresh domains — but age becomes a useful data point when combined with other red flags.

See whether contact emails on the site match the domain. Support@shopname.com on shopname.com is normal; support@gmail.com on a purported large retailer is not. For deeper technical assurance that the operator controls DNS, read DNS verification explained to understand what a verified shop has demonstrated.

A green icon without a link is weaker than a public verify page you can open without trusting marketing copy alone.

Company details and contactability

Legitimate merchants usually publish business identity: legal name, registration number where applicable, physical address or registered office, and multiple contact channels. Cross-check registration numbers against public business registries in the merchant's country. A missing number is not always fraud — sole traders exist — but vague "About us" pages with no locatable entity should raise suspicion.

Test contact paths before ordering expensive items. Send a pre-sales question and note response time and specificity. Automated replies are fine; evasive answers or broken chat widgets are not. Phone numbers that never ring and contact forms that disappear into voids are common on throwaway scam sites.

Compare contact details with the public verification page if the shop displays a trust badge backed by CVR and DNS. Consistent naming across certificate, terms, and invoice builds confidence; mismatches suggest the badge may be misused or copied — verify by clicking through to the official verify URL (e.g. /verify/example.com), not a screenshot. Learn how CVR company verification and DNS proof fit together on legitimate stores.

Policies, pricing, and pressure tactics

Read terms of service, privacy policy, shipping policy, and returns window. Legitimate sellers state realistic delivery ranges and return procedures even when they are strict. Scam shops often copy generic policy text with contradictions — for example, promising 24-hour delivery worldwide on every SKU regardless of stock.

Extreme discounts on branded goods deserve skepticism. If every item is seventy percent off with countdown timers on every page, ask why authorized retailers cannot match the price. Fraud sites use urgency to bypass your checklist; legitimate sales exist, but perpetual urgency rarely does.

Payment methods and checkout security

Prefer payment methods with buyer protections: major card networks, established wallets, and recognized checkout flows. Be wary when a site pushes bank transfer, cryptocurrency, or gift cards as the only option — those paths are difficult to reverse once funds leave your account.

Confirm that checkout runs on a familiar gateway when possible. The presence of HTTPS is necessary but not sufficient; focus on whether the payment experience matches brands you trust and whether the merchant name on the card statement will be recognizable.

For high-value orders, consider splitting risk: smaller test order first, or using virtual card numbers where your bank offers them. Pair payment caution with verification signals described in our trust badge guide.

Reviews, social proof, and third-party mentions

Search the brand name and domain together on independent review platforms and forums. A complete absence of mentions is neutral for brand-new stores but suspicious for shops claiming years of history. Overly uniform five-star reviews posted within days can indicate manipulation.

Social media presence should align with the store's scale. Abandoned profiles or stock imagery-only feeds do not prove fraud but add weight when other flags exist. Look for customer-generated content and responses to complaints — legitimate businesses often reply publicly to resolve issues.

What a verified trust badge adds to your checklist

A credible verification program answers two hard questions: did a real operator pass CVR checks, and does that operator control the shop's domain via DNS? WebshopVerified publishes those answers on a per-domain page shoppers can visit without logging in. The widget on the storefront should link to that same URL — if it does not, treat the badge image as untrusted decoration.

Verification does not guarantee product quality or shipping speed; it reduces anonymous impersonation risk. You should still read reviews and policies. Think of verified status as strong evidence about who runs the site, not a blanket endorsement of every business practice.

Red flags that should stop checkout

Stop immediately if you notice multiple serious issues: mismatched domain and brand, only irreversible payment methods, copied product imagery shared across unrelated domains, or customer service that refuses verifiable business identity. Report suspected fraud to your payment provider and local consumer protection agency with the evidence you collected.

Be equally cautious of off-platform deals: a seller who redirects you from a marketplace message to an unknown site loses platform protections. The checklist applies there too — sometimes more so, because the storefront may be ephemeral.

If you run a shop: help customers verify you

Legitimate merchants suffer when scam sites mimic their niche. Proactive verification shortens customer research and gives support a canonical link to share. Merchants can sign up for WebshopVerified to publish CVR and DNS proof, then reference FAQ when explaining what the badge means.

Educate your audience with the same criteria you would want as a buyer. Transparency converts skeptical first-time visitors into repeat customers — especially in categories where fraud is common.

Extra diligence for high-value and custom orders

When a purchase exceeds your comfort threshold — luxury goods, bulk electronics, bespoke furniture — extend the checklist beyond five minutes. Request written confirmation of serial numbers, warranty registration paths, and authorized distributor status where relevant. Legitimate sellers expect reasonable questions; evasive sellers often push you to pay before details are confirmed.

For marketplace transactions, keep communication on-platform until you are satisfied with seller identity. Moving to an external site removes protections and is a classic bait-and-switch pattern. If an external site displays verification, open the certificate directly rather than trusting inline images that could be forged.

Consider timing: sales that exist only during holidays with no verifiable business history deserve extra scrutiny. Seasonal pop-up fraud campaigns target gift buyers who are rushed and less likely to read policies carefully. Slowing down is a feature, not a bug, when money and personal data are at stake.

Finally, trust your instincts when multiple minor oddities stack up: inconsistent language quality, broken localization, or product categories that do not match the supposed business model. A structured checklist keeps you honest; intuition flags patterns that are hard to articulate but still meaningful.