Most online orders arrive without trouble, but the same convenience makes shopping a favourite setting for scams: fake delivery texts, gift card demands, forged reviews and counterfeit goods. This guide collects the official advice from the US Federal Trade Commission (FTC), the UK National Cyber Security Centre (NCSC), Citizens Advice and the UK Advertising Standards Authority (ASA) into one checklist-driven page. It covers what scams look like, how to protect your accounts and payments, how to judge reviews and review sites, how to avoid fakes, and where to report.
Each section has its own source and "last checked" date. Where a page we read gave no detail, we say so rather than fill the gap.
This guide is based on the public sources listed in each section. We have not tested any store, product or service mentioned. PickGlobe is itself an affiliate site, and the section on review sites explains what that means for you.
Quick checklist
- Do not click links in unexpected emails or texts about orders, deliveries or payments. Go to the shop's own site or app.
- Never pay by gift card, wire transfer, payment app or cryptocurrency to a seller or anyone claiming to be an agency or company.
- Pay by credit card where possible, and keep records.
- Use a unique password for each important account, a password manager and two-step verification.
- Treat reviews as evidence to cross-check, not proof.
- If a price is far below the brand's own, suspect old stock or a fake.
- Report scams, even if you lost no money.
Phishing: messages that want you to click
Source: US FTC, "How to recognize and avoid phishing scams". Last checked: 15 October 2026.
Phishing messages try to get you to hand over passwords, card numbers or other details. The FTC describes what they usually look like:
- They arrive unexpectedly and imitate a bank, card company, utility, carrier or shop.
- They warn of a problem or a hold, and ask you to confirm details, pay an unfamiliar invoice or claim a refund.
- They use a generic greeting, logos that look real, and a link to "update" payment details.
The FTC says that legitimate companies do not ask you to update payment details through a link in an email or text.
What to do with a suspicious message
- Do not click links or open attachments.
- Go to the shop's or carrier's own website or app and look up the order status.
- If you are unsure, contact the company using a phone number or website you already know.
- If you clicked a link, update your security software and scan the device. If you entered a password, change it. If you gave other information, visit IdentityTheft.gov (US) for next steps.
Protect yourself in advance
The FTC advises security software with automatic updates on computer and phone, multi-factor authentication, and regular backups of important files. Our guide to website backups explains the 3-2-1 rule.
Where to report
The FTC lists: forward phishing emails to [email protected], send texts to 7726 (SPAM), and report at ReportFraud.ftc.gov even if no money was lost. In the UK, the NCSC says to report suspicious emails to the Suspicious Email Reporting Service and texts to 7726.
Gift card scams
Source: US FTC, "Avoiding and reporting gift card scams". Last checked: 15 October 2026.
The FTC states that anyone who demands payment by gift card, for any reason, is a scammer, and that real agencies and businesses do not ask for it. The common stories are the government, tech support, a relative in trouble, a utility company, a prize, a boss and romance. The red flags are:
- urgency or secrecy;
- being told to buy cards at several stores;
- being asked to read out the card number and PIN, or send a photo of it;
- an overpayment cheque with a request to send back the difference on a gift card.
Buying a gift card safely
- Use stores you know. Avoid online auction sites, where cards may be fake or stolen.
- Check the protective stickers are intact and the PIN on the back has not been exposed or scratched.
- If anything looks off, choose another card and tell a cashier or manager.
- Photograph the card and receipt in case you need to report loss or fraud.
If a scammer got the numbers, contact the card company straight away (some can help), then report at ReportFraud.ftc.gov. Our short guide to gift card safety covers the same points.
Protecting your accounts and payments
Source: UK NCSC, "Shopping online securely". Last checked: 15 October 2026.
The NCSC groups its advice into shopping, paying, checkout and accounts.
| Stage | What the NCSC advises |
|---|---|
| Shopping | Research unfamiliar stores using trusted reviews and consumer sites. Beware lookalike web addresses and too-good-to-be-true offers. Do not click unexpected links; type the address or search instead |
| Paying | Use a credit card where possible, because it usually has purchase protection. Debit cards give less protection, but a chargeback may be possible. Check the cover from PayPal, Apple Pay or Google Pay. Never pay by direct bank transfer |
| Checkout | Fill in only required fields. Use guest checkout or a payment platform instead of creating a store account. Do not let the browser or the store save payment details |
| Accounts | Use a unique strong password for each important account (email, banking, shopping), stored in a password manager, and turn on 2-step verification |
If you are tricked into paying, the NCSC says to contact your bank and report it to Report Fraud (Police Scotland in Scotland). It also lists reporting scam websites to the NCSC and scam adverts to the ASA.
The padlock is not a guarantee
The FTC says https in the address is not proof that a shop is legitimate, and our guide to HTTPS and the padlock explains why a free certificate only shows the connection to that domain is encrypted.
Is this store real? Checks from the regulators
Sources: US FTC, "Online shopping"; Canada Office of Consumer Affairs, "Online shopping". Last checked: 15 October 2026.
- Search the store's name and website with words like "complaint" or "scam", and compare several review sources and who wrote them.
- Check the vendor's physical location and contact details, and look for legitimate reviews or industry memberships (Canada).
- Find out whether you are buying from the retailer or a third-party seller.
- Be wary of sites asking for card details before a secure page, or pushing quick decisions (Canada).
- Avoid vendors with no privacy policy, and find out why they collect your information (Canada).
- Brand-name goods at bargain prices may be counterfeit or stolen (FTC).
Our guide to how to tell if an online store is legit turns these into a longer checklist, and online shopping rights and returns covers what to do when an order goes wrong.
Fake reviews: what the FTC rule bans
Source: US FTC press release, "Federal Trade Commission announces final rule banning fake reviews and testimonials" (August 2024). Last checked: 15 October 2026.
The FTC's final rule bans:
- creating or selling reviews or testimonials from people who do not exist (including AI-generated) or who never used the business, and buying them or spreading them when the business knew or should have known they were fake;
- offering pay or perks tied to positive or negative sentiment;
- insider reviews without a clear disclosure of the connection, with limits on managers asking employees or relatives to write them;
- presenting a company-controlled site as independent when it reviews a category that includes its own products;
- review suppression by baseless legal or physical threats, intimidation or false public accusations, and claiming displayed reviews are all or most when negative ones were hidden;
- buying or selling bot-generated or hijacked social media followers or views to misrepresent influence.
The FTC can seek civil penalties against knowing violators. The press release does not state the effective date, so check the Federal Register if you need it.
What shoppers can do
If a listing's reviews all look alike, or a review site is run by the seller, treat it with caution. The FTC's general shopping advice also says star ratings alone are not enough, because fake reviews can be positive or negative, and that some comparison sites are run by manufacturers or carry paid listings. Report suspected fake reviews at ReportFraud.ftc.gov. Our guide to spotting fake reviews lists practical signs.
Affiliate sites and "Ad" labels: what to expect from a site like ours
Sources: US FTC, "Disclosures 101 for social media influencers"; UK ASA, "Affiliate marketing". Last checked: 15 October 2026.
PickGlobe earns money when some readers click links to partner stores and buy. Regulators have views on how that should be shown, and knowing them helps you judge any review or guide site.
FTC (United States). The FTC page is written for social media influencers but sets out the principle: disclose any financial, employment, personal or family tie to a brand. Money is not required, because free or discounted products and perks count too. The disclosure should sit with the endorsement where it is hard to miss, not in a profile bio, the end of a post or a hashtag cluster. Wording that works: "ad", "advertisement", "sponsored" or a plain statement. Vague abbreviations such as "sp", "spon" or "collab", or a standalone "thanks", do not. It also says not to describe experience with a product you have not tried.
ASA (United Kingdom). The ASA says its code covers affiliate content, and both the business and the affiliate are responsible. If the commercial relationship is not clear from context, content must be identifiable as advertising. Where only some links are affiliate links, label those links and related content, for example with an "(Ad)" marker. It recommends a clear identifier such as "Ad", says "affiliate" may not be widely understood, and says disclaimers at the bottom of a page are usually insufficient and vague wording such as "may earn a commission" is likely to be problematic.
What you can look for. On this site, pages with partner links say so near the top ("This page contains ads: links to partner stores that pay us if you buy"), and each partner box and buy button carries an "Ad" label. We do not claim to have tested products or stores unless a guide says so. Our affiliate disclosure and how affiliate links work explain this in full. When you read any review site, look for the same things: a clear label near the link, no claims of hands-on testing without evidence, and independence from the seller.
Fake and counterfeit goods
Source: Citizens Advice, "Report fake or counterfeit goods" (UK). Last checked: 15 October 2026.
| Time since you paid | What Citizens Advice says |
|---|---|
| Within 30 days | You can get a full refund |
| 30 days to 6 months | The seller can offer a genuine replacement but must refund if it cannot supply one |
| Over 6 months | You may get a partial refund based on use, and proving it is fake can be harder (ask the genuine brand to inspect) |
Consumer rights last up to 6 years depending on quality when bought, and a seller cannot refuse because the item was cheap. Payment routes: a debit card chargeback; a credit card chargeback for purchases under £100; a section 75 claim for credit card purchases from £100 to £30,000; a PayPal dispute within 180 days. Report to Trading Standards (which may prosecute but cannot recover your money), Report Fraud and Crimestoppers.
Spotting them: the FTC warns that brand-name goods at bargain prices may be counterfeit or stolen. Prices far below the brand's own can mean old stock or fakes. Buy from the brand's own site or a store it lists, check the seller's contact details and return policy, and see our guide to independent beauty brands.
Marketplace sellers
Source: US FTC, "Buying from an online marketplace". Last checked: 15 October 2026.
On a marketplace, check what the platform covers (some run a refund process, others leave it to buyer and seller), read reviews from several sources, look for real photos of the actual item, be cautious of "used", "as is" and very low prices on expensive items, and pay through the marketplace's protected payment. The FTC says never to pay outside the marketplace's system, because you lose its protection, and to avoid wire transfers, gift cards, cash-reload cards and cryptocurrency. The full list is in online shopping rights and returns.
Free trials that turn into charges
Source: US FTC, "Getting in and out of free trials, auto-renewals and negative option subscriptions". Last checked: 15 October 2026.
The FTC advises reading the terms before you sign up, unticking pre-ticked boxes, remembering that a trial that charges shipping or fees is not really free, and putting the cancellation deadline in your calendar. It warns that advertising may exaggerate because affiliate marketers are paid per click. Be suspicious of a renewal notice that asks for card details, and contact the company on a number you already know.
If you have been scammed: a calm checklist
This is general advice combining the sources above.
- Stop contact with the sender. Do not reply or call numbers in the message.
- Secure accounts. Change passwords you may have shared, starting with email, and turn on two-step verification.
- Call your card issuer or bank straight away on a number from your card or their official site. In the US, credit card billing errors need written notice within 60 days of the first bill showing the error.
- Keep evidence: messages, screenshots, order details and payment records.
- Report it: ReportFraud.ftc.gov and IdentityTheft.gov (US); Report Fraud and, for suspicious messages, the Suspicious Email Reporting Service and 7726 (UK); Trading Standards for counterfeit goods.
Related complete guides
- Online Shopping Rights and Returns: UK, EU, US and Canada Compared: What to do when an order goes wrong: cancelling, refunds, warranties and card disputes.
- Web Hosting and Domains: The Complete Guide: How HTTPS, email authentication and domain basics work, if you run a site of your own.
- Customs, Duties and Import Taxes When You Buy from Abroad: Checking an overseas store and the charges that can follow.
The short version
Do not click links in unexpected messages about orders or payments; go to the shop's own site instead. Never pay by gift card, wire or cryptocurrency, pay by credit card where you can, and use unique passwords with two-step verification. Treat the padlock, star ratings and review sites as clues rather than proof, expect any affiliate site to label its ads, be sceptical of prices far below the brand's own, and report scams even if you lost nothing.
Sources: US FTC, how to recognize and avoid phishing scams; US FTC, avoiding and reporting gift card scams; UK NCSC, shopping online securely; US FTC, online shopping; Canada Office of Consumer Affairs, online shopping; US FTC, final rule banning fake reviews and testimonials; US FTC, Disclosures 101 for social media influencers; UK ASA, affiliate marketing; Citizens Advice, fake or counterfeit goods; US FTC, buying from an online marketplace; US FTC, free trials and auto-renewals.