UNIVERSAL RULES FOR SAFE ONLINE SHOPPING
Online shopping is convenient, but before placing an order it is worth spending a few minutes checking the store and the terms of the transaction. Particular caution is recommended when dealing with unusually attractive offers, unfamiliar stores or advertisements leading to websites you have never used before.
1. Check Who Operates the Store
A trustworthy online store should clearly state who the seller is.
Check in particular:
-
the full legal name of the business,
-
the registered office or business address,
-
the tax identification number,
-
the KRS number – for companies entered in the Polish National Court Register,
-
CEIDG details – for sole traders registered in Poland,
-
e-mail address and other available contact details.
In Poland, business details can be verified using the official National Court Register (KRS) or the Central Register and Information on Economic Activity (CEIDG).
Make sure that the business name, address, tax identification number and other details shown on the store website match the information in the official register.
However, the fact that a company exists in an official register does not by itself guarantee that a transaction is safe. Fraudsters may use the details of real businesses, so the other factors described below should also be checked.
2. Read the Terms and Conditions and Seller Information
Before making a purchase, read the store’s Terms and Conditions.
They should contain, or be accompanied by, information concerning in particular:
-
how the contract is concluded,
-
product prices and all additional charges,
-
delivery costs and available delivery methods,
-
payment methods,
-
order fulfilment time,
-
complaint procedures,
-
the right of withdrawal,
-
return shipping costs,
-
exceptions to the right of withdrawal,
-
the seller’s identity and contact details.
The seller should provide legally required information to consumers in a clear and understandable manner before the order is placed.
Right of Withdrawal
For most goods purchased online by consumers, there is a 14-day right to withdraw from the contract without giving a reason.
For the purchase of goods, the period generally starts when the consumer, or a third party designated by the consumer other than the carrier, takes possession of the goods.
However, the right of withdrawal does not apply in every situation. Applicable law provides exceptions, including for certain:
-
goods made to the consumer’s specifications or clearly personalised,
-
goods liable to deteriorate or expire rapidly,
-
sealed goods that are not suitable for return for health protection or hygiene reasons once unsealed,
-
digital content supplied under circumstances specified by law,
-
services that have been fully performed after the legal conditions for such performance have been met.
The consumer may be required to bear the direct cost of returning the goods if they were properly informed of this obligation and the seller did not agree to cover the cost.
A lack of clear information about returns, complaints or the seller’s identity should be treated as a warning sign.
Before making a purchase, please read our Terms and Conditions.
3. Check the Contact Details
A trustworthy store should make it reasonably easy to contact the seller.
Check whether the website provides:
-
an e-mail address,
-
a telephone number, if offered by the store,
-
a contact form,
-
the company’s registered or business address,
-
a live chat or other customer service channel, where applicable.
If you have doubts, you can contact the store before placing an order to see whether the contact details work and whether you receive a clear and relevant response.
A non-working phone number, bounced e-mails, lack of response or replies unrelated to your question may indicate a problem.
4. Check the Website Address and HTTPS Connection
When using an online store, especially during login, checkout and payment, check the address shown in your browser.
The connection should use HTTPS.
HTTPS means that the data transmitted between your browser and the server is encrypted.
However, a padlock icon and HTTPS do not prove that the store itself is trustworthy.
Fraudulent websites can also have valid TLS certificates and use HTTPS.
Always check:
-
the domain name,
-
misspellings in the address,
-
added, removed or replaced characters,
-
unusual domain extensions,
-
the address of the page to which you are redirected during payment.
If the address differs even slightly from the one you expected, do not enter login credentials or payment details.
5. Do Not Treat Certificates and Logos as Proof of Trustworthiness
Online stores may display quality marks, partner logos, payment provider logos, industry badges or various certificates.
An image or logo displayed on a website does not prove that it is authentic.
If a store refers to a certificate, membership programme or buyer protection scheme:
-
check who issued it,
-
verify whether its validity can be confirmed with the issuer,
-
make sure that it applies to the exact business and domain you are dealing with.
Do not decide whether a store is trustworthy solely on the basis of logos shown on its website.
6. Check Reviews, but Treat Them Critically
Customer reviews can provide useful information, but they do not guarantee that a store is legitimate.
Check reviews from several independent sources.
Pay attention to:
-
how long reviews have been appearing,
-
whether they concern the exact same domain,
-
whether a large number of very similar positive reviews appeared within a short period,
-
whether reviews describe specific purchasing experiences,
-
whether the store responds to customer complaints,
-
whether the same problems are repeatedly mentioned, such as non-delivery, missing refunds or lack of contact.
Both overwhelmingly positive and overwhelmingly negative reviews should be approached critically.
Fraudulent stores may publish fake reviews or copy feedback belonging to other businesses.
7. Be Wary of Offers That Look Too Good to Be True
An extremely low price does not always mean a bargain.
Be especially careful if:
-
almost all products are discounted by 70–90%,
-
the store claims a promotion ends within a few minutes,
-
a countdown timer resets after refreshing the page,
-
a product that is unavailable everywhere else is supposedly available in large quantities,
-
the price is significantly below normal market prices,
-
the advertisement puts strong pressure on you to buy immediately.
Fraudsters often create time pressure to reduce the chance that a customer will properly check the store.
8. Use Secure Payment Methods
Check what payment methods the store offers.
A trustworthy online store will often use recognised payment providers or allow card payments or other commonly used payment methods.
Be especially cautious if the store:
-
accepts only a standard bank transfer,
-
asks you to pay outside the official checkout process,
-
sends bank account details through a messenger app,
-
asks for payment to a private individual unrelated to the seller,
-
requires an unusual or difficult-to-reverse payment method.
When redirected to a payment provider or bank, check the website address again before entering any information.
Never give an online store your online banking login and password.
Banking credentials should only be entered on the genuine website or official application of your bank.
9. Protect Your Personal Data
Provide only personal data that is genuinely necessary to complete the service or order.
A typical online store may need:
-
your first and last name,
-
delivery address,
-
e-mail address,
-
telephone number,
-
invoicing details, where an invoice is required.
If a store requests additional information without an obvious reason, such as:
-
a national identification number,
-
identity document number,
-
a scan of an identity document,
-
date of birth,
-
mother’s maiden name,
consider whether this information is genuinely necessary for the transaction.
In some specific cases, applicable law or the nature of a service may justify collecting additional data, so such a request does not automatically mean fraud. However, the seller should be able to explain why the data is required.
10. Protect Your Passwords and Account
Use a unique password for every important service.
Do not use the same password for:
-
an online store,
-
your e-mail account,
-
online banking,
-
social media.
Consider using a password manager and multi-factor authentication (MFA/2FA) where available.
Never send your account password by e-mail or messenger.
A store employee should not need your account password in order to assist you.
11. Keep Your Device and Connection Secure
Use an up-to-date operating system and web browser for online purchases.
Install security updates regularly.
Avoid shopping or logging into online banking from public computers or devices that you do not control.
Public Wi-Fi does not automatically make a connection unsafe, particularly when properly secured HTTPS services are used, but extra caution is advisable when using networks you do not trust.
Do not ignore browser warnings concerning:
-
an invalid certificate,
-
an insecure connection,
-
a suspected phishing website,
-
suspicious files or downloads.
12. Beware of Fake Advertisements and Messages
A fraudulent online store may be promoted not only through search results.
Fraudsters also use:
-
social media advertisements,
-
search engine advertisements,
-
SMS messages,
-
e-mails,
-
messaging apps,
-
fake competitions and promotions.
The fact that a store appears in an advertisement on a well-known internet platform does not guarantee that it is legitimate.
If you receive a link to an unusually attractive promotion, consider opening the known store’s website by manually entering its address rather than clicking the link directly.
13. Check the Order Summary Before Paying
Before confirming your order, verify:
-
the product name,
-
quantity,
-
price,
-
delivery costs,
-
any additional charges,
-
selected payment method,
-
delivery address.
The button used to complete the purchase should clearly indicate that clicking it creates an obligation to pay, for example by using wording equivalent to:
-
“order with obligation to pay”,
-
“buy now”,
-
“pay now”,
or another unambiguous phrase.
The obligation to pay should not be hidden behind vague wording.
14. Keep Proof of Your Purchase
After placing an order, keep:
-
the order confirmation,
-
e-mails from the store,
-
the order number,
-
payment confirmation,
-
product information,
-
promotional terms if they were relevant to the purchase.
For expensive or unusual purchases, it may also be useful to save a screenshot of the offer.
Such information may help if you later need to enforce your rights.
15. If You Suspect Fraud, Act Quickly
If you have paid money to a store that appears to be fraudulent, act without delay.
Depending on the circumstances:
-
contact your bank or payment provider,
-
if you paid by card, ask whether a chargeback procedure may be available,
-
keep payment confirmations, correspondence and the website address,
-
change your password if you entered it on a suspicious website and used the same password elsewhere,
-
if you disclosed banking information, contact your bank immediately,
-
report suspicious websites to the appropriate cybersecurity authority, such as CERT Poland in Poland,
-
if you suspect that a criminal offence has occurred, report the matter to the Police.
The sooner you act, the better the chance of limiting the consequences of the fraud.
Remember
No single factor proves that an online store is trustworthy.
HTTPS, positive reviews, a professional-looking website or even the details of a real company can all be copied or misused.
The safest approach is to assess several independent elements together:
seller + domain + terms and conditions + contact details + reviews + payment method + credibility of the offer.
If you have serious doubts, it is safer to abandon the transaction and choose another seller.
Useful Sources of Information
For customers in Poland, useful official sources include:
-
UOKiK – Office of Competition and Consumer Protection – consumer rights,
-
CERT Poland / NASK – warnings concerning online fraud and cybersecurity,
-
KRS – National Court Register – verification of companies,
-
CEIDG – Central Register and Information on Economic Activity – verification of sole traders.
Last updated: 8 September 2026