How do I tell if a website is safe before buying?

First of all, check if there's a padlock in the address bar and if the URL starts with "https", then look up reviews on Google or other sites - if nobody's talking about it or you only read negative reviews, I'd leave it alone and look elsewhere.

I totally get the worry, because honestly it's gotten really complicated. One thing I notice a lot when I'm searching for stuff online is that legit websites, especially smaller ones, almost always have an "About Us" page that tells their story, maybe with real photos, people's names, founders. If you search for the company name and find literally nothing - no LinkedIn profile, no articles, nothing - that's a red flag. Real sites have a footprint scattered around the internet, they don't just pop out of nowhere.

Another detail that's saved me a bunch of times is checking how long the domain's been registered. There are free sites where you can see when that web address was bought - if they registered it a week ago for a shop that claims to have been in business for ten years, well, that's the whole puzzle backwards. Established companies tend to keep the same domain for years, while scams change them constantly.

And then, before I put my credit card in, I always try searching something like "sitename.com scam" or "sitename.com negative reviews". I'll admit sometimes I even leave a message on their social media, if they have it, just to see how they respond. If they ignore straightforward questions from regular people, that's not a good sign. With sites that gave me good vibes, their customer service was there, whether they were fast or not.

One thing that's saved me multiple times is checking if the site has a decent "About Us" section with real names, photos, and maybe a phone number you can actually call - not just an anonymous email. I almost sent money to a sports equipment company that looked legit, but when I tried to find their phone number it didn't exist, and the "founder" on the page was clearly a stock photo.

Beyond the https and reviews, also check if the site is old or brand new (a Whois lookup will tell you) and whether the prices are way too low compared to competitors - that's usually a red flag.

A legit site usually isn't in a rush to sell you stuff and responds to questions with specific details, not generic copy-paste responses.

What really works is going to look up the domain on whois.com - there you can see who's registered behind the site and when it was created. If you see hidden data or the domain was registered like a week ago and it's already selling expensive stuff, that's a huge red flag. Legitimate sites always have registration data visible or at least plausible. In my opinion this is the thing people forget to do, but it's the one that actually saves you from amateur scammers.

Then yeah, https and reviews are important, but I'd add checking whether the phone number actually exists - it's not enough that it's written down. I've come across beautiful-looking sites with a number that when you call it's a generic recorded voice or nobody answers. A simple but effective thing is to just do a Google search for the number you see: often if it's fake you'll find it linked to dozens of different sites, and you'll immediately get a sense that something's off.

Another thing I notice is that legitimate sites, even small ones, always have a decent privacy policy and returns policy written out. It doesn't need to be long, but it needs to say something concrete like "refunds within 30 days" and not stuff like "we'll do our best". If it's vague, I'm not putting my money there.

It's not like a website is "safe" or "unsafe" in absolute terms - it really depends on what you're buying and how much you're spending. A site with https and good reviews reduces the risk, but it's not a guarantee. Real security comes down to knowing how to tell when you're trusting your data to someone who at least has a serious infrastructure behind them.

I once bought from a site that had everything: SSL certificate, decent reviews, active social media with photos of actual products. Then I find out the company was registered in three different countries, no phone number, and the "about us" was copied from another business. It didn't go badly for me, but I definitely got spooked. After that I realized it's worth checking the company name in official registries (Chamber of Commerce, or whatever the equivalent is in that country), verifying if the domain was registered recently (scam sites often change domains frequently), and especially doing a quick search like "[site name] scam" on Google. If results come up, you can immediately see if other people have had problems.

The others here are right about https and clear terms, but I'd add: pay with traceable, reversible methods (credit card, PayPal), not a direct bank transfer. If the site insists on that without a good reason, that's already a red flag. And if the price is ridiculously low compared to competitors, it's not luck - it's a scheme.