What HTTPS actually tells you
HTTPS helps prevent others on the network from reading or altering traffic between you and the site. It confirms that the certificate is valid for the domain you opened—not that the domain belongs to a trustworthy seller.
What the padlock cannot prove
It cannot prove that products exist, claims are true, refunds will be honored, or the site is free of phishing and impersonation. A scammer can obtain a certificate for a newly registered lookalike domain.
What to check next
Read the full domain carefully, verify the organization through an independent source, inspect payment methods and policies, and look for pressure tactics or inconsistent branding. Use HTTPS as one baseline check, never the final one.
Before you continue
- Read the complete domain, not only the padlock
- Check for substitutions, misspellings, and extra words
- Verify claims through a separate trusted source
- Treat urgency and unusual payment requests as warning signs
- Do not enter sensitive information based on HTTPS alone
A website check reviews public signals available at that moment. It is not a guarantee, legal advice, fund recovery, continuous monitoring, or a substitute for your bank's fraud support.