Credit cards are widely considered the safest payment method to avoid scams when shopping online, offering strong legal protection and the ability to initiate chargebacks if goods are not received or are fake. For in-person transactions, using contactless digital wallets (e.g., Apple Pay, Google Pay) or cash in secure, public locations provides the best protection.
Here are some of the most secure payment methods available online:
BBB Tip: 10 steps to avoid scams.
How to pay when buying from someone you don't know: keep these tips in mind to help avoid scams
3 Safe Online Payment Methods
Superior Fraud Prevention
Credit cards come with stronger consumer protection than debit cards. Federal laws cap liability for fraudulent charges at $50, but Dover Federal Credit Union Mastercard® cards reduce your liability to $0.
Debit card payments offer less protection, but you might be able to make a claim for a refund under a voluntary scheme called 'chargeback'. If you use payment services such as PayPal, Apple Pay or Google Pay, check their 'terms & conditions' to see what cover they provide. Never pay by direct bank transfer.
Only use secure payment methods – those used by reputable online retailers. Make sure you don't feel rushed. Scammers will often create a sense of urgency. Saying it's a limited offer or price encourages you to act without taking as much time to consider the purchase.
Yes, PayPal provides significant protection against scams through its Buyer Protection Program, 24/7 fraud monitoring, encryption, and strong security features like two-factor authentication, covering eligible purchases that don't arrive or aren't as described, and protecting unauthorized transactions, though users must file disputes within 180 days.
To scare a scammer, you could waste their time with silly responses, pretend to be an automated messenger, or resend them the messages they sent you. Report all text scams to the Federal Trade Commission's Report Fraud site, filter messages from unknown numbers, and avoid opting in on company sites.
When you pay by bank transfer, your sensitive financial information remains confidential. Unlike using cards, which require sharing your card number and CVV, bank transfers only require the recipient's account details. This significantly reduces the risk of your information being compromised.
Yes, banks can refund scammed money, but it depends heavily on the payment method, how quickly you report it, and if the transaction was truly "unauthorized" (someone stole your login) versus you being tricked into sending it (authorized push payment). You're more likely to get a refund for unauthorized card charges or bank transfers if reported fast, but it's harder for Zelle, wire transfers, or gift cards, though filing a formal dispute or complaint with agencies like the Consumer Financial Protection Bureau (CFPB) can help.
Once you wire the money, you never receive the loan. In addition, the crooks have your bank account information and may rob your account.
When you share your bank account number, even with reliable individuals and organisations, you expose yourself to potentially unauthorised transactions. Scammers are increasingly sophisticated and may smoothly use your account number to initiate transfers or withdrawals without your permission.
With the right habits and tools in place, you can make your bank account significantly harder for hackers to access and help prevent identity theft.
No. Only account holders and your financial institution can view your account balances.
Debit and credit cards
Not only are they quick and easy to use, but they offer a relatively high level of security and protection of your private data. If you're using a credit card, you don't actually pay for the goods or services until your credit card bill is due.
If you've paid for something you haven't received, you might be able to get your money back. Your card provider can ask the seller's bank to refund the money. This is known as the 'chargeback scheme'.
Yes, someone can access your bank account through PayPal if they gain control of your PayPal account, usually via phishing or malware, which gives them access to linked funds; however, PayPal uses strong security (encryption, firewalls) to protect your data, and the merchant doesn't see your bank details, so the risk is primarily from your own account security being compromised. Key is to enable 2FA, use strong unique passwords, and be vigilant against scams.
The 2/3/4 rule is a guideline, primarily used by Bank of America, that limits how many new credit cards you can get: no more than 2 in 30 days, 3 in 12 months, and 4 in 24 months, helping to prevent over-application and manage hard inquiries on your credit report. While not universal, it's a useful benchmark for responsible card application, though other banks have different rules (like Chase's 5/24 rule).
Purchases you should avoid putting on your credit card
If you shared your credit card or banking information with a scammer, then call your financial institution to let them know. They will follow a fraud procedure that might include helping you change your password, or closing your old account and opening a new one. The latter may require new credit and debit cards.