Ravindra BagaleCourses & study guides Track your progress

Guides Cyber safety for everyone

Safe Online Shopping Checklist (Before You Pay)

By , Cyber Security trainer LinkedIn Published: Last updated:

Before you pay online, use a known shop or app, check the address bar for the real domain and https, avoid surprise payment links from SMS/chat, and prefer card/UPI methods you can dispute. Do not type card details into pages you reached only from a random ad or message.

Quick steps

  1. Start from a bookmark, typed address, or official store app.
  2. Read the domain carefully (extra letters/hyphens are a warning).
  3. Prefer logged-in checkout on a site you already use.
  4. Use payment methods with buyer protection when possible.
  5. Never share card OTP with a chat agent.

Why this matters

Nina in Amsterdam almost paid on a lookalike sneaker site. Farhan in Ahmedabad stuck to the official brand app and saved a fake “order confirm” SMS.

Shopping scams copy logos. Your checklist is domain + known app + calm payment.

What you need to know

Trust signals: correct spelling of domain, https, known app from store. Weak signals alone: logos, “https” on a fake domain, urgency countdown.

Before you pay

  • Official app or typed URL — Safer
  • Link from cold SMS — Risky
  • Share card OTP with “support” chat — Unsafe

How to do it (step by step)

  1. Start from a bookmark, typed address, or official store app.
  2. Read the domain carefully (extra letters/hyphens are a warning).
  3. Prefer logged-in checkout on a site you already use.
  4. Use payment methods with buyer protection when possible.
  5. Never share card OTP with a chat agent.
  6. Save order emails and screenshots if something goes wrong.

Example: Farhan ignores a fake order SMS

Farhan got an SMS “complete payment for your order” with a link. He opened the real shop app instead — no pending order.

Nina compared the domain character by character and closed the tab.

Both used their banks’ card-controls when unsure.

Common mistakes

  • Rushing because a timer says “2 minutes left”.
  • Paying via gift cards for a normal retail order.
  • Using public Wi‑Fi without care for banking apps.

Trusted places to check

Quick revision

  • Known app or typed URL.
  • Check the domain.
  • No OTP to chat “support”.

Ravindra Bagale's Tip

If the price is magic and the site is new, assume risk. Compare the domain carefully.

Quick quiz: check what you learned

  1. Safest way to open a shop you already trust?

    1. Use the official app or a URL you type/bookmark
    2. Tap the payment link inside a surprise SMS
    3. Follow a pop-up that says your cart will expire
    4. Log in through a stranger’s “deal” WhatsApp note
    Show answer

    A. You should start the shopping session yourself.

  2. A chat agent asks for your card OTP to “confirm the order”. You…

    1. Refuse — OTPs are only for screens you opened
    2. Send it once so the discount is not lost
    3. Read it aloud on a call they place to you
    4. Photograph the SMS and post it for “verification”
    Show answer

    A. Card OTPs are never for chat agents.

Learn more on this site

Short path above. These pages go deeper:

Frequently asked questions

What is this guide about?

It explains everyday safety for: safe online shopping, fake stores, card safety. Plain steps, no IT jargon required.

What is the one rule to remember?

Use known stores or carefully checked sites, pay with safer methods, and never share OTP with “sellers”.

Do I need to be a cyber expert?

No. These steps are for parents, students, shoppers and anyone who uses a phone.

Where do I report if something already went wrong?

India: 1930 and cybercrime.gov.in. US: reportfraud.ftc.gov. UK: Action Fraud. Also tell your bank or the platform quickly.