← Blog / Scam Detection

How to Check if an Online Store Is Legit Before Buying

Before you check out at an unfamiliar store, run these six checks — reverse image search, WHOIS, refund policy fine print, social proof, third-party tools, and payment gateway trust.

July 16, 2026 8 min read by Jask

Bottom line up front: Before you enter your card at a store you have never used, run six checks — reverse image search the product photos, look up the domain, read the refund policy fine print, audit the social followers, cross-check on third-party review sites, and confirm the payment gateway is real. Two minutes of verification beats weeks of chargeback disputes. Or paste the URL into a free trust audit and get all of it scored automatically.

You saw an ad. The product looks perfect, the price beats everywhere else, and the checkout page has that reassuring padlock. The only thing standing between you and a purchase is a question you probably did not stop to ask: is this store legit?

It is the right question, and you should ask it every time. Fake online stores have gotten good at looking real — same templates, same product photos, same trust badges as the genuine article. But the cracks are still there if you know where to press. Here is a fake online store checker routine built for the moment right before you click “buy.”

1. Reverse Image Search the Product Photos

Fake stores almost never photograph their own inventory. They scrape images from supplier catalogs, from competitor websites, and from social media. If the same photo is floating across dozens of stores under different names, the “shop” in front of you is a reselling shell at best and a pure scam at worst.

How to do it:

  • Right-click a product image and choose “Search image with Google” (or upload it to Google Lens / TinEye).
  • Look at where the photo appears. One or two places, including the brand’s own site? Probably fine. Dozens of unrelated stores with different prices and logos? That is a shared dropshipping catalog.

Escalation: If the photo carries another store’s watermark, or shows packaging branded with a different company name than the one selling it to you, that is an outright confession of theft. Close the tab.

This single check catches a surprising share of fake stores, because cloning images is faster than creating them — and scammers always take the fast route.

2. Look Up the Domain

A store’s website can look a year old while its domain is six weeks old. That gap is one of the clearest scam signals there is, because scam stores are disposable by design.

What to check:

  • Run the domain through a free WHOIS lookup (who.is or lookup.icann.org).
  • Find the Created date. A store claiming “established 2018” on a domain registered two months ago is lying.
  • Note the registration length. Domains registered for a single year are common among scammers who expect to abandon them. Real businesses usually register for several years at once.

Keep it in context: A new domain is not automatically a scam — every honest startup begins with one. What matters is the mismatch between the claimed history and the actual record. A fresh store that is honest about being new and shows real, consistent activity is a different animal from a fresh store pretending to be a decade-old retailer.

3. Read the Refund Policy Fine Print

The refund policy is where a store tells you, in writing, whether it intends to stand behind what it sells. Scam stores write policies that look helpful until you read the conditions buried in them.

Red flags inside the text:

  • “All sales final” on a store you have never heard of.
  • Returns must be shipped internationally, at your expense, to an address in a different country than the store claims to operate from.
  • A return window of only a few days, or “contact us within 7 days for authorization” with no one ever responding.
  • Restocking fees large enough to make returning pointless.
  • No refund or returns page at all.

What is normal: a clear 14–30 day window, spelled-out conditions, and a return address in the same country where the store says it is based. The phrase to look for is something specific and time-bound. Vague language with no dates, no address, and no process is a warning, not a policy.

4. Audit the Social Media Followers

A fake store will often link to social profiles to look established. Having an account is cheap; having a real community is not. Bought followers and empty engagement are easy to spot once you look.

How to check:

  • Click every social link in the footer and check the account creation date. Brand new with few posts? Propaganda, not proof.
  • Compare follower count to engagement. Fifty thousand followers but two likes per post means the followers were purchased.
  • Read the comments. Real customers leave specific remarks — sizing issues, shipping delays, how a product held up. Bot comments are generic (“Great product! Fast shipping!”) and come from accounts with no profile photo and no history.
  • See whether the account replies to questions and complaints, or whether it is a one-way broadcast.

A small but real following is nothing to worry about. A huge following with zero conversation is.

5. Cross-Check With Third-Party Tools

A store’s own website will always tell you it is wonderful. You want signals it does not control.

Where to look:

  • Search [store name] review and [store name] scam on Google.
  • Check Reddit — search the domain on r/Scams and related subreddits. Victims post fast, and the detail is usually specific (order numbers, dates, what arrived versus what was promised).
  • Check Trustpilot and Google Reviews for the domain directly.
  • For tech or newer brands, look at Hacker News and Product Hunt.

How to read what you find: Trust detailed, first-person accounts over vague five-star praise — which can be manufactured just as easily as vague complaints. A cluster of reports about non-delivery, counterfeit goods, or customer service that vanishes after payment is a pattern, not a coincidence. And if a store claims thousands of customers but leaves zero trace anywhere off its own site, that absence is its own answer.

This cross-check is what turns a gut feeling into evidence. No single review proves anything, but the overall shape of what strangers say about a store tells you a lot about whether it is safe to buy from.

6. Confirm the Payment Gateway Is Real and Trusted

This is the check that protects your money directly. Even if you get everything else slightly wrong, paying through the right channel means you can reverse a bad transaction.

Two things to verify:

First, what methods does the store accept? Here is how the common ones compare for buyer safety.

Payment methodBuyer protectionWhat it means for you
Credit cardChargeback rightsSafest — you can dispute a fraudulent charge
PayPal180-day dispute windowStrong protection, easy to file
Apple Pay / Google PayTokenized, backed by your cardSafe — your real card number is hidden
Debit cardLimited, varies by bankMoney leaves your account immediately
Bank transfer / wireNoneWalk away
CryptocurrencyNoneWalk away
Gift cardsNoneWalk away

Second, look at how the checkout behaves. When you reach the payment step, you should see a recognizable, trusted processor — Stripe, PayPal, Shopify Payments, Adyen, or your bank’s 3-D Secure screen — rather than a raw form asking you to type a card number into a page that looks off. Reputable gateways have invested in security and handle disputes. A store that funnels you toward wire transfers, crypto, or gift cards, and refuses cards entirely, is built so you cannot get a refund.

The Two-Minute Pre-Purchase Routine

Here is the whole routine in the order you would actually run it, right before checkout.

StepCheckPassFail
1Product photosOriginal or brand-suppliedSame image on dozens of stores
2Domain ageMatches the store’s claimed historyWeeks old, claims years
3Refund policyClear window, real return address”All sales final” or none
4Social followersReal engagement, specific commentsHuge count, zero conversation
5Third-party mentionsReal reviews on Reddit / TrustpilotNo trace anywhere off-site
6Payment gatewayCards / PayPal via a known processorWire / crypto / gift cards only

If more than one row fails, the safe move is to not buy. The product will exist somewhere honest, and the small premium you pay there is far cheaper than chasing a refund that never comes.

When you want all six checks done at once instead of by hand, paste the store URL into the Valdos audit. It pulls domain registration data, inspects the SSL type and security headers, weighs pricing and monetization patterns, checks social and contact signals, and reviews blacklist reputation — then hands you a transparent 0–100 score with the reasons behind it. Low score or several red categories, and you have your answer about whether that ad was a deal or a trap.

Disclaimer: This article is for educational purposes and does not constitute legal or financial advice.

Check any website in 10 seconds

Paste a URL. Get a full trust audit — domain reputation, fraud signals, monetization analysis.

Run a free scan