Check for “https” in the URL: Ensure the website address begins with https rather than just http. The “s” indicates encryption. While encryption alone doesn’t guarantee legitimacy, a missing “s” is a major red flag.

Examine the domain name carefully: Look for subtle misspellings, extra words, or unusual extensions in the web address. Scam sites often mimic legitimate retailers with slightly altered domain names.

Use trusted verification tools:

• Check suspicious websites using the Google Safe Browsing Transparency Report.

• Use Whois.com to see who owns the domain and how long it has been active. Recently created domains can signal a scam.

Avoid clicking on ads or search engine links: Instead of selecting sponsored results, manually type the retailer’s official website into your browser. High search rankings do not guarantee legitimacy.

Never use a debit card for online purchases: Credit cards offer stronger fraud protection and limit your liability if your information is stolen. Debit cards can expose your bank account directly.

Be cautious if your payment is “declined”: If a website claims your credit card was declined and asks for another card, stop immediately. This is a common tactic used to collect multiple card numbers.

Keep your browser updated: Modern browsers like Google Chrome use AI-powered protections to detect and warn you about suspicious or fraudulent websites.

Monitor your financial statements regularly: Review credit card and bank statements for unauthorized transactions and report suspicious activity immediately.