Payment is the moment online shopping becomes risky, because it is when your money leaves your control. The method you choose decides what happens if the product never arrives, arrives damaged, or turns out to be fake. Some methods offer strong buyer protection and dispute processes, while others offer none at all, and scammers know the difference. Choosing the right method is the single most important safety habit in online shopping.

Credit cards and major payment platforms with buyer protection programmes generally offer the strongest safety net. If goods do not arrive or do not match their description, you can usually dispute the charge, and the provider investigates while your money is protected. Debit cards offer some protection too, but the money leaves your bank account immediately, which makes recovery slower and more stressful.

Virtual card numbers, where your bank or card provider generates a temporary number for one purchase, add another layer of protection by limiting exposure if a store's data is breached. Two-factor authentication on your payment accounts, and alerts for every transaction, help you spot unauthorised charges quickly. Enable both wherever they are available, and review your statements regularly.

Wire transfers, gift cards, cryptocurrency and direct bank transfers to individuals offer little or no buyer protection, because they cannot easily be reversed. A legitimate online store has no reason to ask for payment by these methods, and a seller who insists on them is a major red flag. The same applies to sellers who ask you to pay outside a marketplace's checkout system, for example by messaging you a separate payment link.

Off-platform payment requests are a classic scam pattern: the marketplace's protections disappear the moment you pay elsewhere, and the seller can vanish with your money. If a seller on a marketplace asks you to pay directly, report them to the platform and walk away, however attractive the price. The discount is not worth losing both the money and any remedy.

Fake checkout pages mimic real stores, complete with logos and professional design, but several clues give them away. Check the web address carefully for misspellings or unusual domains, and confirm the site uses secure encryption, shown by a padlock and https in the address bar. Remember that encryption alone does not prove a store is legitimate: it only means the connection is private.

Be wary of checkout pages that ask for unnecessary personal information, such as identity numbers or passwords to other accounts, which no shopping site should need. Also watch for payment pages that appear after clicking a link in an unsolicited message or advertisement, especially one claiming a delivery problem or unpaid fee. Those messages are usually phishing attempts designed to steal payment details.

If you suspect a payment was fraudulent, contact your card issuer or payment provider immediately, using the number on the back of your card rather than any number from the seller's site. Report the charge, ask whether the card should be frozen, and keep every record: order confirmations, screenshots, messages and tracking information. Speed matters, because dispute windows are limited.

Also change passwords for any accounts that shared credentials with the compromised site, and monitor your statements for further charges. If the seller is on a marketplace, report them there too, so other buyers are protected. Payment safety is not about fear: it is about choosing methods that give you options when things go wrong, and refusing methods that take those options away.