Guide · 6 min di lettura
How to check if an online shop is legit — in 5 minutes
Vajeeran Logeswaran · Updated · Sources and corrections
A practical workflow for checking a shop before you pay. Record what you can verify, what conflicts and what remains unknown; no single signal settles whether a seller will deliver.
1. Start with the exact address
Copy the website address from the checkout, not just the name in an advertisement. Compare it with the address on the order confirmation and contact page. A similar spelling can belong to a different operator. HTTPS protects the connection; it does not establish the honesty of the shop.
Look up the registration date through a domain registry or RDAP service. A recent domain deserves further investigation if the shop claims a long history, but a new business may be legitimate and an old domain can change hands. Save the lookup date and the source.
2. Match the seller identity
Write down the legal name, address and contact details given in the imprint and terms. Search the official register for the claimed country, then compare the entry rather than stopping at a matching name. A fraudster can copy a real company identity.
A missing Swiss register entry is not proof of fraud. Some sole proprietorships are not required to register. Ask for clarification and compare other evidence; a register record also does not prove that the company controls the website.
3. Compare the offer and payment terms
Compare the exact model, condition, accessories, delivery charges and warranty with other offers. Large differences are a reason to investigate, not a verdict. Save the delivery promise and returns address before paying.
Check which payment methods actually work at checkout. Logos alone are not evidence. Ask the payment provider which dispute or buyer-protection conditions apply to this transaction. A card, wallet or payment brand does not guarantee delivery or reimbursement.
Worked example: two conflicts, one unknown
Illustrative example, not an investigation of a real shop: a seller claims to have traded since 2012, its domain was registered last week, and its terms name a different company from the footer. The registration date alone is inconclusive; the unexplained identity mismatch is the more useful question to resolve.
Save both pages and ask the seller to explain the relationship using contact details independently obtained from the claimed company. Until the mismatch is resolved, postpone payment. Do not publish a fraud accusation based only on these observations.
Keep a short evidence log
Use four columns: claim, source URL, date checked and result. For example: “Delivery in three days | product page | today | promise only, not independently verified.” Separate facts from interpretations.
CanITrustThis can organise automated findings, but provider availability and page access affect coverage. Read the individual evidence and missing-check notices. A score is not a guarantee, and a manual check may still be necessary.
Sources and further reading
Worked examples and scenarios are explicitly illustrative. Conditions and procedures can change; check the relevant original source.
Report an error or suggest a source