How do I know if a website is safe?

A padlock only means the connection is encrypted; it does not prove the person running the site is trustworthy.

Check the exact address, search for independent reviews, and avoid paying when a deal or warning is designed to rush you.

Why the padlock is not enough

That padlock in your browser only means your connection to the site is encrypted, so other people on the network cannot easily read what you send. It says nothing about who runs the site. Scam shops can get a padlock and disappear after collecting payments. Trust has to come from checking the site itself — its exact address, its reputation, and how it asks you to pay.

What to do, step by step

1. Read the address letter by letter. Scammers use look-alike domains with swapped or extra letters, so type important addresses yourself instead of tapping ad or email links.
2. Search for the store name plus words like reviews, complaints, or scam. Look for independent coverage, not testimonials on the site itself.
3. Check for a real contact address, clear returns policy, and prices that make sense. A brand-name product at a fraction of its normal price is a warning sign.
4. Pay by credit card when you can, and never by gift card, wire transfer, or payment app at a stranger's request. Credit cards offer stronger dispute protection.
5. Stop if the page rushes you with countdown timers, fake virus warnings, or a demand to call a support number. Close the tab and open the real site.