How to Shop Online Safely in the UK: A Practical Guide to Protecting Your Money

The Scale of Online Shopping Fraud in the UK

Online shopping fraud is not a niche problem. It is a widespread issue that touches millions of UK households every year.

According to UK Finance, authorised and unauthorised fraud losses totalled over 1.2 billion pounds in 2023, with purchase scams consistently ranking among the most common types. Action Fraud received over 77,000 reports of online shopping fraud in the same period. The Office for National Statistics estimates that fraud accounts for roughly 40% of all crime in England and Wales, making it the most common offence in the country.

The good news? Most online shopping fraud is preventable once you know what to look for.

How to Verify a Website Is Legitimate

Check for HTTPS and the Padlock

A legitimate shopping site should start with https:// and display a padlock icon. However, a padlock alone does not guarantee trustworthiness; it simply means the connection is encrypted. Scammers can obtain SSL certificates too, so treat this as a minimum requirement rather than a seal of approval.

Investigate the Domain Name

Fraudsters often register domains that look almost identical to well-known brands. Watch out for misspellings like 'amaz0n.co.uk' or 'johinlewis.com'. Check the domain age using a free WHOIS lookup tool; if it was registered days or weeks ago, proceed with extreme caution.

Look for Real Contact Details

A genuine online shop will have a physical address, a working telephone number, and a proper email address. Try calling the number or searching the address on Google Maps. If the address turns out to be a residential property or vacant lot, that is a significant red flag.

Search Companies House

If the website claims to be a registered UK business, verify this for free on the Companies House register at gov.uk. Search for the company name and check the details match. This takes under a minute and can save you hundreds of pounds.

Read Independent Reviews

Do not rely on testimonials displayed on the website itself; those can be fabricated. Search for the company on Trustpilot or Google Reviews instead. A single bad review might be a one-off, but dozens of people reporting undelivered goods is a clear warning sign.

Safe Payment Methods: Know Your Options

Credit Cards and Section 75 Protection

For purchases between 100 and 30,000 pounds, paying by credit card gives you legal protection under Section 75 of the Consumer Credit Act 1974. This makes your credit card provider jointly liable with the retailer if goods are faulty, not as described, or never delivered. It applies even if you only paid part of the amount on credit card. It is one of the strongest consumer protections in the UK, and it costs nothing to use.

Debit Cards and Chargeback

Debit cards do not carry Section 75 protection, but they do offer the chargeback scheme. This is not a legal right but a voluntary scheme operated by card networks like Visa and Mastercard. You can request a chargeback for transactions of any value, and your bank will attempt to recover the money from the retailer's bank.

PayPal and Digital Wallets

PayPal offers its own Buyer Protection programme, which covers you if an item does not arrive or is significantly different from its description. Apple Pay and Google Pay add an extra layer of security by using tokenisation, meaning your actual card number is never shared with the retailer.

Virtual Cards

Some banks, such as Revolut and Monzo, let you generate virtual card numbers for online purchases. These disposable numbers can be frozen or deleted after a single use, making them useless to criminals if compromised in a data breach.

Bank Transfers: Proceed with Caution

Direct bank transfers offer the least protection. Once money leaves your account, recovering it is extremely difficult. Legitimate retailers rarely ask for bank transfer payment, so if a seller insists on this method, treat it as a serious warning sign.

Spotting Fake Online Shops

Prices That Seem Too Good to Be True

If a website offers a brand-new iPhone for 150 pounds or designer trainers at 80% off, your instinct is probably right. Scam sites lure victims with impossibly low prices. Compare prices across established retailers. If one site is dramatically cheaper than everywhere else, walk away.

Social Media Advertisements

Many fraudulent shops reach victims through targeted ads on Facebook, Instagram, and TikTok. These ads often feature slick product videos and thousands of purchased likes, linking to professional-looking websites that disappear within weeks. Always search independently for the company rather than clicking through the ad.

Artificial Urgency

Countdown timers, 'only 2 left in stock' messages, and time-limited discount codes pressure you into buying before you can think. Scam sites use these aggressively to prevent research. If a deal is real, it will still be available in ten minutes.

Poor Grammar and Inconsistent Design

Many fraudulent websites originate overseas and are poorly translated. Look for awkward phrasing, spelling errors, and inconsistent formatting. Scam sites often copy 'About Us' and 'Terms and Conditions' pages from legitimate businesses, sometimes forgetting to change the company name.

Marketplace Safety: eBay, Facebook Marketplace, Vinted, and Depop

eBay

eBay's Money Back Guarantee covers most purchases if an item does not arrive or does not match the listing. Stick to paying through eBay's official checkout rather than agreeing to pay outside the platform, as this voids your protection.

Facebook Marketplace

Facebook Marketplace has limited buyer protection compared to dedicated shopping platforms. Never pay by bank transfer before receiving an item. For local collection, meet in a public place and inspect the item first.

Vinted and Depop

Both platforms offer buyer protection, but only through their official payment systems. A common scam involves sellers asking for PayPal Friends and Family or bank transfer to 'avoid fees', which removes all protection.

Common Marketplace Red Flags

Across all platforms, watch out for newly created accounts with no history, sellers who refuse to provide additional photos, prices significantly below market value, and requests to move communication off the platform.

Protecting Your Payment Details Online

Think Twice Before Saving Your Card

Every website that stores your card information is a potential target for hackers. Only save card details on websites you use regularly and trust completely.

Use Guest Checkout When Possible

For one-off purchases, use guest checkout rather than creating a full account. This limits personal data the retailer holds and means fewer passwords to manage.

Keep Your Software Updated

Outdated browsers and operating systems can have security vulnerabilities that criminals exploit. Enable automatic updates on your devices and keep your browser current.

What to Do If You Have Been Scammed

Contact Your Bank or Card Provider Immediately

Call your bank or credit card company as soon as you realise you have been scammed. If you paid by credit card, you can make a Section 75 claim for purchases between 100 and 30,000 pounds. For debit card payments, request a chargeback.

Report to Action Fraud

Report the scam to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. In Scotland, report directly to Police Scotland by calling 101.

Gather Your Evidence

Save everything: screenshots, confirmation emails, payment receipts, messages with the seller, and tracking information. This supports your bank claim and Action Fraud report.

Check for Identity Theft

If you entered personal details on a fraudulent website, change your passwords immediately, especially if you reuse them elsewhere. Consider signing up for a free credit monitoring service to watch for suspicious activity on your credit file.

Seasonal Risks: When Scammers Are Most Active

Black Friday and Cyber Monday

The weeks around Black Friday see a dramatic increase in fraudulent websites and phishing emails. Shoppers are primed to expect huge discounts, making them more likely to click suspicious deals.

Christmas Shopping Season

The pressure to find specific gifts before Christmas makes people vulnerable. Tight deadlines mean less time for research. Be especially wary of social media ads promoting 'must-have' items that are sold out everywhere else.

January Sales

Post-Christmas sales create another window for fraudsters. Scam sites exploit bargain-hunting with fake clearance sales. The same rules apply: verify the retailer, compare prices, and pay by credit card.

Summer Holiday Deals

Travel scams peak before summer. Fake holiday rental listings and fraudulent flight booking sites see increased activity from May through July. Always verify accommodation on multiple platforms and never pay by bank transfer.

Age-Specific Tips for Staying Safe

Teens and Young Adults on Marketplaces

Young people are often confident online but may lack experience with financial transactions. If you are a teenager buying on Depop, Vinted, or Facebook Marketplace, always use the platform's official payment system rather than paying directly. Be sceptical of accounts with no reviews or transaction history. Talk to a parent or trusted adult before making large purchases.

Older Adults Shopping Online for the First Time

If you are new to online shopping, there is no reason to feel embarrassed about taking things slowly. Start with well-known retailers like John Lewis, Marks and Spencer, or Amazon. Ask a family member to walk you through your first purchase if unsure.

Parents Monitoring Children's Online Purchases

Consider setting up a prepaid card with a spending limit rather than giving children access to your main card. Have regular, relaxed conversations about online safety.

Browser Extensions and Tools That Help Verify Sites

Web of Trust (WOT)

Web of Trust is a free browser extension that shows safety ratings for websites based on user reviews and data analysis. A traffic-light system gives you an instant visual indicator of whether a site is considered trustworthy.

ScamAdviser

ScamAdviser.com analyses websites and provides a trust score based on factors like domain age, location, and user reviews. You can check any URL before making a purchase.

uBlock Origin

While primarily an ad blocker, uBlock Origin also blocks known malicious domains and phishing sites. It is lightweight, free, and open source.

Your Bank's Own Tools

Many UK banks offer built-in protections through their apps. Features like transaction notifications, card freezing, and virtual cards are available from Monzo, Starling, Revolut, and most high street banks.

WHOIS Lookup Tools

Free WHOIS services like who.is let you check when a domain was registered. If a website claiming to be established has a domain registered last month, that is a strong signal to avoid it.

Building Long-Term Online Shopping Habits

Staying safe online is about building good habits that become second nature. Keep passwords unique for every account using a password manager. Enable two-factor authentication wherever offered. Scan your bank statements weekly to catch anything unusual early.

Most importantly, trust your instincts. If something feels wrong about a website, a seller, or a deal, walk away. There will always be another opportunity to buy from a seller you trust.

Online shopping should be convenient and enjoyable. With a little knowledge and a few sensible habits, it can be completely safe as well.