How to Shop Safely Online This Black Friday 2026: A Shopper's Checklist

To shop more safely this Black Friday and holiday season 2026, check who is selling the item, compare the exact product and total cost, protect your accounts, and choose a payment method with useful dispute protections. Before placing an order, read the shipping and return terms and save evidence of what the seller promised.

A convincing storefront or a large discount is not enough to make that decision. The checklist below helps you separate useful evidence from reassuring appearances, whether you are shopping at an unfamiliar store, through a marketplace, or after seeing an offer on social media. The practical advice applies broadly, but the legal protections and reporting routes discussed here are primarily for US shoppers.

Your Black Friday and holiday shopping safety checklist

Use these checks before you start shopping, at checkout, and while waiting for your purchases.

Before shopping

• Update your devices. Install available operating-system, browser and security updates, and enable automatic updates where available.

• Protect your shopping and email accounts. Use unique passwords and turn on two-factor authentication, an additional check when you sign in.

• Open the intended retailer independently. Use a known bookmark, its official app, or a website address you have checked rather than relying on an unsolicited offer link.

Before paying

• Identify the actual seller. Check the business name, website address, contact details and, on marketplaces, the seller named on the listing.

• Read feedback across sources. Look for detailed, recent experiences with delivery, product condition, support and refunds.

• Compare the same product and complete cost. Match model, size, condition and included accessories, then include shipping, taxes and disclosed fees.

• Check authenticity. For branded goods, consider buying directly from the brand or a retailer whose authorization you can verify.

• Read the purchase terms. Check shipment timing, estimated arrival, return eligibility, deadlines, costs and refund method.

• Review payment and privacy choices. Consider a credit card where possible, check for recurring charges, and question requests for unrelated personal information.

After ordering

• Save the evidence. Keep the listing, applicable policies, order confirmation, receipt and messages.

• Track independently. Open the retailer or carrier website or app yourself instead of using unexpected delivery-message links.

• Monitor the purchase. Review statements, inspect the item when it arrives, and raise problems promptly.

Check who is actually selling to you

Start with the website address, not the logo. Read the domain carefully and check whether the business name, contact information, support options and purchase policies fit together. A store using several unexplained business names or offering no clear way to resolve a problem deserves closer attention before you pay.

On a marketplace, distinguish the platform from the seller. Check who is listed as selling the item and who handles returns. A familiar marketplace name does not mean every listing comes from the marketplace operator or the product's manufacturer.

Search the seller's name with words such as “complaint” or “scam,” then read the results rather than treating the search itself as a verdict. Are the complaints recent? Do they describe repeated non-delivery or unresolved refunds? Does the business appear to address problems? A single complaint is not conclusive, and an absence of complaints is not proof that a new store is reliable.

Read reviews across several sources, looking beyond the average rating. Comments describing the exact product, delivery experience and handling of returns are more useful than a page of generic praise. The FTC's online shopping guidance recommends checking multiple review sources because ratings and reviews can be fake or misleading.

Missing information, inconsistent identity and pressure to pay are reasons to investigate or leave. You do not need to prove that a store is fraudulent before deciding that it has not answered enough of your questions.

Understand what HTTPS, reviews and Welo Badge certification can tell you

Different signals answer different questions. HTTPS encrypts information traveling between your browser and a website, but a fraudulent seller can also use an encrypted connection. Reviews describe reported experiences, while business certification assesses a business against defined requirements.

Welo Badge is a business verification and trust certification organization. Its review considers business identity, business model, website, payments, policies, security, submitted documents and other relevant evidence. Certification is earned through review, and not every applicant is approved. The Welo Trust Standard explains its assessment criteria and scope.

If a seller displays certification, inspect the issuer-hosted record rather than trusting the badge image. For Welo Badge certification, open the official Welo Page on welobadge.com, check the certification information, and match the business and verified domain to the site where you intend to buy.

A Welo Page shows approved public certification and check information, along with material explicitly made public. Private application evidence and documents remain private. This gives you information to inspect, not a guarantee of a transaction or authentication of an individual product. For further reading, see What Is a Welo Page and How Does It Work?

Check whether the deal and the product are what they seem

A discount is useful only if it applies to the product you actually want at a worthwhile total price. Compare the manufacturer and model number, size, condition, included accessories and stated warranty terms. A refurbished device, an older model or a smaller package may explain a price difference that initially looks like a bargain.

Calculate the complete checkout cost, including shipping, taxes and disclosed fees. Read any conditions attached to the offer, such as a required bundle, membership or subscription. A countdown or crossed-out reference price is not evidence that the current price is the best available, so compare independently before paying.

For example, a hypothetical discounted appliance may cost less on the product page but more after delivery, while a competing offer includes an accessory you would otherwise buy separately. Comparing only the headline prices misses that difference.

Reduce the risk of counterfeit goods

For branded products, the clearest starting point is the brand's own store or an authorized retailer. Where possible, verify authorization through the brand's website or support team rather than relying solely on the seller's claim.

Look for a specific product description, identifiable seller, clear condition and meaningful answers about where the item comes from. If authenticity remains uncertain, choose another source, especially when the purchase involves a product where getting the wrong item could have serious consequences.

Do not use price, packaging or marketplace familiarity as a stand-alone authenticity test. An ordinary price does not establish that an item is genuine, and polished photographs do not resolve questions about the seller or the goods.

Secure your shopping accounts, email and devices

Use a strong, unique password for each account so that one exposed password does not also unlock your other accounts. A reputable password manager can generate and remember those passwords. Protect the password manager itself with a strong password.

Give your email account particular attention because password-reset links often arrive there. Someone who controls that inbox may be able to reset access to shopping and other accounts.

Turn on two-factor authentication wherever available. It adds a sign-in check beyond your password, such as approval through an authenticator app or a security key. The FTC's account-security guidance recommends an authenticator app or security key for more protection than codes delivered by text or email when those options are available.

Keep your phone, computer, browser and security software updated, with automatic updates enabled where possible. These steps protect your accounts and device, but they do not replace checking the business you are buying from.

Public Wi-Fi is not the same as an unsafe website

Avoid the outdated assumption that every public Wi-Fi connection makes shopping unsafe. The FTC explains that public Wi-Fi is usually safe because encryption is now widespread. You still need an encrypted connection to the correct website and an updated device.

The distinction matters: protecting the connection cannot make a fraudulent destination legitimate. A VPN is not a substitute for checking the seller, either.

Choose payment carefully and share only necessary information

Paying by credit card when possible can provide useful protections for qualifying billing disputes. Credit and debit card protections differ, so do not assume that a purchase has the same dispute process simply because both cards display a familiar payment-network logo.

For an unfamiliar seller, favor a payment route with clear purchase-dispute terms. If the seller insists on gift cards, a wire transfer, cryptocurrency or a person-to-person payment-app transfer, pause rather than letting the offer push you into a method you have not evaluated.

Legitimate payment apps and digital wallets have terms that depend on the service and transaction. Check whether you are making a covered purchase or a personal transfer, what funding method is being used, and how a dispute would work. Do not assume that every wallet payment automatically carries the same protections as paying directly by credit card.

Similarly, a third-party buy now, pay later arrangement can have different rights and conditions from a credit card. Review the repayment schedule and dispute terms before choosing installments. No payment method guarantees a refund.

At checkout, review the final amount and look for recurring-payment terms. Decline optional data collection where appropriate, and question requests unrelated to fulfilling the purchase. Do not provide financial information through an unsolicited message claiming that your order needs verification. Open your retailer account independently to check the request.

Read shipping, return and refund terms before buying gifts

A promise to ship is not the same as a promise to arrive. Check when the seller expects to hand the order to the carrier, what arrival estimate applies, and whether that timing meets your gift deadline. Do not assume that a holiday promotion includes a delivery guarantee.

Before ordering, use these questions to understand what happens if the gift is late, unsuitable or needs to go back.

Save the terms that apply when you buy, especially any seasonal extension or sale-item exception. Do not assume that every Black Friday purchase qualifies for extended holiday returns.

What the US shipping rule actually requires

For merchandise covered by the FTC's Mail, Internet, or Telephone Order Merchandise Rule, sellers must have a reasonable basis to expect shipment within the advertised time. If no shipping period is specified, the default is within 30 days. This concerns shipment, not a universal requirement that an order arrive within 30 days.

If the seller cannot ship on time, it must provide the applicable choice to accept a delay or cancel for a refund. The FTC's guidance on unreceived orders and billing disputes explains that a required full refund for an unshipped order cannot be replaced solely with a gift card or store credit.

Keep these rights separate from a store's discretionary change-of-mind return policy. A return window for an unwanted gift is a different issue from an order that was never delivered as agreed or a qualifying billing error.

Verify delivery texts and account alerts without using their links

Phishing is a fraudulent message designed to obtain your information or money. When it arrives by text, it is often called smishing. A message can seem especially plausible when you are already expecting several packages.

Imagine a text saying, “Your parcel could not be delivered. Pay a small redelivery fee today.” The timing and small amount do not establish that it came from your carrier. Use this sequence instead:

1. Pause. Do not use the message's link or provide payment details.

2. Open a known destination. Go independently to the retailer or carrier website or app.

3. Check the order. Use the tracking number from your purchase records to review its status.

4. Ask through a known channel. If the issue remains unclear, use support details from the official site.

The US Postal Inspection Service's package-text guidance says that requested USPS tracking texts do not contain links. That statement is specific to USPS, not a rule for every carrier.

Forward suspicious texts to 7726. For USPS-related smishing, report the message to spam@uspis.gov, preserving the sender, date and screenshot without opening the link. Clear grammar and a familiar logo are not reasons to skip verification.

What to do if an order goes wrong or you suspect a scam

For an order or refund problem

1. Preserve your records. Keep the listing, receipt, shipping promises, applicable policies, tracking and correspondence.

2. Contact the seller independently. Explain the problem and request a specific remedy, such as delivery information, a replacement or a refund.

3. Contact the payment provider if unresolved. Ask which dispute process applies and what evidence and deadlines it requires.

A chargeback is a possible reversal of a card charge through the issuer, not a guaranteed outcome. The CFPB's credit-card purchase guidance distinguishes billing errors from other purchase disputes.

For qualifying US credit-card billing errors, written notice should reach the issuer's designated billing-inquiries address within 60 days after the first statement containing the error was sent. Use the address for billing disputes or inquiries, not the payment address. Examples can include unauthorized charges, an incorrect amount or items not delivered as agreed. General complaints about an item's quality are not the same billing-error category.

Contact the issuer promptly for instructions, and do not let ongoing negotiations with a seller cause you to miss an applicable deadline.

For suspected fraud or exposed information

If you entered card or banking information on a suspicious site, contact your bank or payment provider immediately using its official app or a known number. Explain what you shared and ask how to protect the account and address any transactions. Do not wait for the supposed seller to respond.

If credentials were exposed, secure the affected account and its recovery email. Replace compromised passwords, change them anywhere they were reused, and strengthen authentication. USPIS also advises notifying your financial institution if you interacted with a suspicious package-tracking page, even if you did not press submit.

Report fraud through the FTC's ReportFraud portal. Internet fraud can also be reported to the FBI's Internet Crime Complaint Center, with USPS-related smishing reported as described above. Reporting provides information to authorities, but it does not promise reimbursement or replace contacting your payment provider.

FAQ

Make the purchase only when the important details are clear

Proceed when you can identify the seller, understand the product and total cost, choose an appropriate payment route, and accept the shipping and return terms. If an important question remains unanswered, pause or choose another seller. Keep your records after checkout and act promptly if a problem appears.