Checking vendor site security before ordering

Before entering any information on a vendor site, basic security checks take about two minutes and can save significant hassle. Here is what to check and why it matters.

HTTPS and certificate validity

Any legitimate vendor site uses HTTPS — the padlock icon in your browser address bar. Click the padlock to see the certificate details. Check that the certificate is issued to the domain you are visiting (not a parent company name that looks different) and that it has not expired. An expired certificate is a red flag for a site that is not being actively maintained.

HTTPS protects your data in transit from your device to the site's server. It does not protect you from a fraudulent site — a phishing site can have a valid HTTPS certificate. It just means a legitimate site is using it correctly.

Domain verification

Phishing sites use domains that look like legitimate vendor domains with slight variations — a character transposed, a hyphen added, a different TLD. If you found the vendor through a forum post or search result rather than a direct bookmark, verify the domain against the canonical vendor domain listed in recent community discussions. Searching for the vendor name in a trusted forum thread is more reliable than a Google search, which can surface phishing sites in paid results.

Payment page security

The payment page specifically should be checked for HTTPS. If a site uses HTTP (no S) on the payment page, do not proceed. Payment data sent over HTTP is transmitted in clear text. Some sites use HTTPS on most pages but accidentally leave the payment flow on HTTP — this is a site misconfiguration but still represents a real security gap.

No personal financial information to share

The payment methods relevant to this context — cryptocurrency — do not transmit any personal financial information. You send crypto to a wallet address and the payment is complete. There is no payment card number to protect. This substantially reduces the attack surface for the payment step specifically compared to credit card transactions.