How to shop online more safely
Safe online shopping starts with checking the seller, protecting your accounts and choosing how you pay. These ten checks can help reduce the risk of scams and account theft.
- Use a unique password. Give each shopping account a strong password you do not reuse elsewhere. A password manager can help you keep track of them.
- Check payment protections. Consider a credit card where available, and check your issuer’s dispute and refund terms. Protections vary by country and provider. Avoid sellers that insist on bank transfers, gift cards or cryptocurrency.
- Enable multi-factor authentication. Turn it on for shopping, email and payment accounts where offered. Never share a verification code with someone who contacts you unexpectedly.
- Keep receipts and monitor transactions. Save order confirmations and check your statements. Contact your bank promptly through its official channels if you spot an unfamiliar payment.
- Use a trusted connection. Avoid entering payment details on networks you do not trust. A VPN does not establish that a seller is genuine.
- Check the website, not just HTTPS. HTTPS encrypts the connection, but fraudulent shops can use it too. Check the domain spelling, seller details, independent reviews and return policy.
- Treat unexpected messages cautiously. Do not use unsolicited delivery or discount links to sign in. Open the retailer’s official website or app yourself.
- Question social-media offers. An advertisement or familiar logo is not proof of legitimacy. Verify the seller independently before paying.
- Share only necessary information. Use guest checkout when practical and review what the shop stores. Avoid saving payment details on shared devices.
- Keep devices updated. Install security updates for your operating system, browser and shopping apps. Back up important files as part of your wider security routine.
Sources and further reading: NCSC shopping and payment safety guidance and the FTC online shopping checklist. These sources include UK- and US-specific consumer rights; check local rules and your payment provider’s terms.
Updated 23 September 2026: corrected the payment heading, clarified the limits of HTTPS and VPNs, and reformatted the checklist. Originally published 25 May 2024.
Explore more cybersecurity resources and the CWME Knowledge Hub.
