How to check an online store before you buy

A fake store can copy a real brand's name, photos and reviews. The checks below use free public tools. Scamwatch, run by the ACCC, recommends most of them; this guide shows where to click and what to read.

We took the screenshots ourselves. Officeworks appears as an example of a store that passes the checks. It isn't a recommendation, and we have no arrangement with Officeworks.

1. Read the web address

Look at the address bar before you look at the products. Scamwatch lists these red flags in a store's address:

• several dashes or symbols in the domain name
• a name that imitates a real business, such as "Ap9le"
• an Australian business whose address doesn't end in .com or .com.au

If an ad or social media post brought you to the store, search for the business yourself. Scamwatch warns that the first search result isn't always the real website.

2. Search for reviews on other sites

1. Search for the store's name followed by the word "scam".
2. Search again with the word "reviews".
3. Read what other sites say about the store, including forums and review sites.

Do not rely only on reviews on the store's own pages. Scamwatch treats a site with only positive reviews, or reviews light on detail, as a warning sign.

3. Check when the domain was registered

If a store claims years of trading but its domain was registered last month, investigate the mismatch before buying.

1. Open ICANN Lookup (opens in a new tab).
2. Type the domain, such as holdmytwist.com, and select Lookup.
3. Scroll to Dates and read Created.

Enlarge image

ICANN Lookup result for holdmytwist.com showing the Created date 1 October 2026

×

ICANN Lookup for holdmytwist.com. The Created date is 1 October 2026.

Open full-size image

That's this website's own domain. A new domain on its own doesn't prove a scam. Compare the date with what the store says about itself.

The public .au WHOIS lookup (opens in a new tab) does not show a domain's creation date. Its last-updated date does not tell you when the domain was registered. Use step 4 to check the business identity.

4. Check the Australian Business Number (ABN)

Use this check when a store claims to be an Australian business or displays an ABN. A foreign store’s lack of an ABN alone does not establish that it is a scam. Scamwatch lists a store with no ABN, terms and conditions or privacy policy as a warning sign. Look for the ABN in the store's footer, terms or checkout pages. For an address ending in .com.au, you can also get it from the domain record:

1. Open the .au WHOIS (opens in a new tab) and type the domain.
2. Tick I'm not a robot, then select Look It Up.
3. Read Registrant and Registrant ID.

Enlarge image

.au WHOIS result for officeworks.com.au showing registrant OFFICEWORKS LTD and ABN 36004763526

×

.au WHOIS for officeworks.com.au. The registrant is OFFICEWORKS LTD with ABN 36004763526.

Open full-size image

Then check that ABN:

1. Open ABN Lookup (opens in a new tab).
2. Type the ABN or the business name and search.
3. Check that ABN status says Active.
4. Check that Entity name matches the business on the website.

Enlarge image

ABN Lookup result for ABN 36 004 763 526 showing OFFICEWORKS LTD, active from 9 February 2000

×

ABN Lookup for 36 004 763 526. The entity is OFFICEWORKS LTD, active from 9 February 2000, located in VIC 3148.

Open full-size image

When you pay, check the name again. Scamwatch warns when the account holder doesn't match the business you think you're paying.

5. Check Google Safe Browsing

1. Open Google Safe Browsing site status (opens in a new tab).
2. Enter the store's address and press Enter.
3. Read Current status.

Enlarge image

Google Safe Browsing site status for officeworks.com.au showing No unsafe content found

×

Safe Browsing for officeworks.com.au shows "No unsafe content found".

Open full-size image

Enlarge image

Google Safe Browsing site status for Google's test phishing page showing This site is unsafe

×

Safe Browsing for Google's test page shows "This site is unsafe" and says it tries to trick visitors into sharing personal info.

Open full-size image

Google checks for sites that are dangerous to visit, such as phishing and malware. A clean result doesn't tell you whether the store will send your order, so do the other checks too.

6. Find the contact details and policies

Scroll to the bottom of the store's home page. Scamwatch suggests checking for:

• contact details
• a privacy policy
• terms and conditions of use
• dispute resolution

Open the contact page and the returns policy. If the store lists a physical address, search for it on a map and check the store is really there. A site with no contact information is likely a scam, according to Scamwatch.

Enlarge image

Officeworks website footer with links to Returns policy, Contact us, Privacy policy and Terms of use, and accepted payment methods

×

Open full-size image

7. Check how you'll pay

Look at the payment options before you enter card details. Scamwatch lists these as warning signs:

• only one payment option
• payment by gift card, Bitcoin, money order or pre-loaded card
• a request to pay several different PayIDs or bank accounts

Scamwatch suggests using a secure payment service such as PayPal or a credit card. If you pay by PayID or bank transfer, check the name shown matches the business.

If you've already paid

1. Contact your bank or card provider straight away and ask them to stop the transaction.
2. Change the passwords for your banking, email, government and shopping accounts.
3. Call IDCARE on 1800 595 160 for free help with a recovery plan.
4. Report the scam to Scamwatch (opens in a new tab).

Sources: Scamwatch, Buying and selling scams (opens in a new tab) and Website scams (opens in a new tab). Additional source: ABR, ABN entitlement (opens in a new tab).