November 2026 · shopping · practical guide
Do Not Treat an HTTPS Padlock as Seller Verification
An encrypted connection can protect a transaction with the wrong person.
For: Shoppers opening an unfamiliar promotional storefront. Output: Storefront verification question sheet.
Why revisit this now?
November is a useful planning point for seasonal purchases and gifts. This guide does not assert a new sale, fraud wave, or price trend. It applies the FTC’s standing online-shopping guidance to a specific decision before money or a return opportunity is at stake.
The source is a dated snapshot, not a live monitoring feed. Return by 2027-01-30, or earlier if your evidence changes. A source published in an earlier year is identified as such below; its retrieval date is not a claim that the underlying rule is new.
The useful distinction
The FTC explicitly says HTTPS does not mean a site is legitimate; scammers can encrypt sites too.
Encryption is important, but identity and payment risk need their own checks.
This guide separates a statement from the evidence that supports it. The companion tool turns your three answers into a short, ordered action brief. It does not replace the source, contact anyone, or turn uncertainty into a confident prediction.
Three questions to resolve
Have you checked the seller outside its own website?
FTC guidance recommends looking at other people’s experiences.
If No or Not sure: Search for the seller name with complaint or scam and review independent evidence.
Are identity, contact, and return terms understandable?
A secure connection does not fill missing business details.
If No or Not sure: Resolve missing seller or refund information before paying.
Is a safer payment method available?
The FTC warns against payment methods that make recovery difficult.
If No or Not sure: Avoid sellers insisting on gift cards, wire transfers, payment apps, or cryptocurrency only.
Answer Yes only when you have supporting evidence. Choose Not sure when the information is missing or unclear. No and Not sure both keep the relevant action in the brief, but the exported record preserves the difference.
A worked example
Suppose the first check is No, the second is Yes, and the third is Not sure. These are illustrative choices, not facts about you. The App evaluates all three checks, records one confirmation, and returns two evidence gaps: checks 1 and 3.
The first next step is: Search for the seller name with complaint or scam and review independent evidence. The brief also keeps this follow-up: Avoid sellers insisting on gift cards, wire transfers, payment apps, or cryptocurrency only.
Now change only the first answer to Yes. The result has one remaining gap, check 3, and its action becomes the next step. If all answers are Yes, the result records three confirmations without declaring the situation safe, compliant, or eligible.
What can go wrong?
A polished checkout page or padlock cannot establish that the promised item exists.
A polished brief can still contain mistaken inputs. Before acting, compare it with the original evidence and the current official instructions. If two sources conflict, ask the responsible authority or professional to resolve the conflict rather than selecting the answer you prefer.
Use the brief somewhere useful
Copy or download the storefront verification question sheet for your own records or a focused conversation. It includes your answers, unresolved actions, the rule explanations, source links, and the review date. Printing is also free; no account or payment is required.
Keep sensitive supporting documents outside this tool. A result link contains only the three status choices, but even those can reveal context. Share only after reading the warning, and do not add private identifiers to a public message.
General information only. This is not medical, legal, financial, or emergency advice. A completed checklist is not independent verification and does not submit an application, complaint, or request.
Sources, dates, and limits
- Federal Trade Commission — Online Shopping
Compare total delivered costs and exact product details, check return policies, scrutinize reviews, use safer payment methods, and retain purchase records. An HTTPS padlock alone does not prove a seller is legitimate.
Publication/effective date: Undated guidance; retrieved 2026-11-01. Checked 2026-11-01.
About this guide
- Category
- Household
- Reading time
- About 4 minutes
- Last reviewed
- Cost
- Free to read. No account is required.
Companion App: Do Not Treat an HTTPS Padlock as Seller Verification. It runs in this browser and does not upload your entries.
This guide is edited for clarity and checked against the sources it links. It is not a substitute for official instructions or qualified advice. A linked source does not show that every person needs this guide.