The Safest Ways to Pay Online (and the Ones Scammers Love)

The choice you make at checkout matters more than the site

Most shopping-safety advice focuses on judging the website. That is worth doing, but it misses something you control completely and that works even when your judgement of a site turns out to be wrong: how you choose to pay. Two people can buy the identical fake item from the identical fake shop, and one walks away refunded while the other loses everything — the only difference being which button they pressed at the checkout.

That is because payment methods are not interchangeable. Some come with a built-in path back to your money if the deal goes bad; others hand your cash to the seller with no way to reach in and pull it back. Scammers understand this ranking perfectly, which is exactly why they nudge you towards the methods with no protection. This article lays out that ranking in plain terms, so that even a purchase from a shop you have not properly vetted still has a safety net underneath it. For the wider habit of checking the shop itself, our safe-ways-to-pay guide and our piece on how fake online shops are built sit alongside this one.

The safest ways to pay

Credit card — the best-protected option there is

A credit card is the strongest way to pay a seller you are not sure about, because it carries two independent forms of cover. The first is chargeback, a card-network rule that lets your bank reverse a payment when goods fail to arrive or are badly misdescribed. The second, and the more powerful, is Section 75 of the Consumer Credit Act: for anything costing more than £100 and up to £30,000, your card provider is held jointly responsible with the seller, so you can claim your money straight from the card company even if the shop has vanished. Nothing else you can pay with comes with a statutory backstop like that. If a purchase is significant and the seller is unfamiliar, this is the method to reach for.

Debit card — good, with one layer instead of two

A debit card does not carry Section 75, but it does qualify for chargeback under the same card-network rules, which means a payment can still be disputed and reversed through your bank when something goes wrong. That makes it markedly safer than any transfer or code-based method. The practical takeaway: a debit card is a reasonable everyday choice, but for a big-ticket item from a seller you cannot verify, a credit card's extra layer is worth having.

PayPal and similar — safe only in the right mode

Payment services like PayPal can be genuinely protective, but only when used correctly, and the distinction is where people get caught. A payment sent as goods and services is covered by buyer protection you can invoke if the item never comes or is not as described. A payment sent as friends and family waives all of that — it is designed for splitting a dinner bill with someone you trust, not for buying from a stranger. Any seller who insists you pay "friends and family to avoid the fee" is really asking you to switch your protection off, and that request alone is a reason to walk.

Buy Now, Pay Later — convenient, but read the fine print

Spread-the-cost options at the checkout are now almost everywhere, and the protection they carry varies enormously between providers and depending on whether the money ultimately moved through a card. Some give you a proper way to dispute a purchase that never arrived; others leave you chasing the retailer yourself while the instalments keep leaving your account regardless. If you use one, find out before you commit how it handles goods that fail to turn up, and where you can, fund the instalments from a credit or debit card rather than straight from your bank, so a card-level dispute stays available if things go wrong. Ease at the checkout counts for very little if it quietly removes the route back to your money.

The ways scammers love

Now the other end of the scale — the methods fraudsters steer you towards precisely because your money cannot follow you back out. The unifying feature is that once the money has moved, there is no neutral third party you can appeal to and no button anyone can press to bring it home.

Bank transfer

A direct bank transfer sends money straight from your account to theirs with no buyer protection attached. The recent authorised push payment reimbursement rules mean a transfer made under deception is no longer always unrecoverable, but reimbursement is conditional, capped and far from certain — a safety net for the worst case, not a reason to relax. As a way of paying an unknown online seller, a transfer remains one of the riskiest choices you can make, which is why "our card system is down, please pay by transfer" at the final step is a classic trap.

Cryptocurrency

Crypto payments are close to irreversible by design. Once a transaction confirms, there is no bank to call, no chargeback to raise and no realistic way to force the money back. A legitimate high-street retailer has no reason to demand payment in cryptocurrency for ordinary goods; when a "shop" or an "investment" insists on it, treat the demand itself as the warning. This is the same irreversibility that makes crypto the currency of choice in wire-fraud and investment cons.

Gift cards

Being asked to pay for anything with retailer gift cards — reading the codes aloud or sending photos of them — is one of the clearest scam signals in existence. No genuine company, tax office, utility or delivery firm takes payment in gift cards. The money becomes untraceable the instant the code is shared, which is the entire appeal to a fraudster and the entire reason to refuse.

A quick ranking you can keep in your head

| How you pay | Protection if it goes wrong | Use it for | | --- | --- | --- | | Credit card (over £100) | Strongest — chargeback plus Section 75 | Bigger buys, unfamiliar sellers | | Debit card | Good — chargeback via card networks | Everyday online shopping | | PayPal "goods and services" | Buyer protection on eligible purchases | Marketplaces and smaller sellers | | PayPal "friends and family" | None — protection waived | Only people you personally trust | | Bank transfer | Little to none; conditional reimbursement only | Known payees, never unknown shops | | Cryptocurrency | None — irreversible | Never, to pay an online seller | | Gift cards | None — untraceable once shared | Never, as payment for anything |

The rule of thumb writes itself: the further down this table a "shop" tries to push you, the more it is telling you about its plans for your refund.

When a seller changes the payment method at the last second

One specific move deserves its own warning, because it is where an otherwise convincing shop finally shows its hand. You add an item, reach the checkout, and something suddenly diverts you off the safe path — the card option "isn't working today", a discount appears for paying by transfer, or a message asks you to send the money to a named person rather than the business. Each variation has the same purpose: to move you from a protected method to an unprotected one at the exact moment you are committed and impatient. The right response is not to find a workaround but to stop entirely. A real merchant that accepts cards does not ask you to abandon them to save a fee, and the friction is not a glitch — it is the point.

Before you go

It helps to stop thinking of a card payment as only a way to hand over money, and start seeing it as a small insurance policy you buy at the same time. When you pay by credit card, you are purchasing two things at once: the item, and the right to undo the purchase if the item was a lie. That second thing costs you nothing extra, sits quietly in the background, and is the entire reason a fraudster would rather you paid any other way. You already own the policy — the only mistake is leaving it in your pocket because a checkout offered you a discount to pay another way.

So make the safe method your default and let the seller argue you out of it, not the reverse: reach for the card first, and treat any push towards transfer, crypto or gift cards as a decision the shop has made about you, not a convenience it is offering you. When a seller is one you have never used, running its address through the CheckAScam checker now being built is one more reading to weigh before you choose how to pay — it looks at a site's history rather than your card's small print, it is still unfinished, and it is best treated as a second opinion rather than the final word. The final word, as ever, is which button you press.