forumNew topic

How can I check if a new e-commerce site is legit before shopping?

GGamze K***Member
Job title
Accounting Manager
Sector
Textile
Organization type
300-person organization
Joined
Jul 2024
Message
350

Doki · E-commerce infrastructure · 2026

#1

We run a small consumer advisory and retail support office. Lately, we've been getting tons of questions from clients about sites they found through social media ads but have never heard of before.

They see a winter coat that normally retails for 4,500 TL or a 12,000 TL kitchen appliance listed at absurd discounts like 1,800 TL, and they turn to us asking: "Is this site safe, how can we tell before buying?"

We'd like to put together a concrete, official, and easy-to-follow checklist to guide our clients and publish on our website. What official registries should be checked to verify whether an unfamiliar site is a legal business or an outright scam? How can one evaluate a site's technical and corporate legitimacy step by step?

FFatma Ç***New memberCommunity member
Joined
May 2026
Message
1
Most Helpful#2

Short answer: To verify an unfamiliar e-commerce site, you should first confirm its corporate records through the Ministry of Trade's official registries, then inspect its payment gateway and domain history. This three-step check lets you filter out the vast majority of fake or scam sites within minutes.

Here are the recommended check steps to share with your users, in order:

1) ETBİS and MERSİS Verification: Check the ETBİS QR code in the website's footer. A genuine QR code routes directly to the Ministry of Trade's official registry page when scanned and matches the business name listed on the site. Furthermore the MERSİS number tax ID and registered trade name must be verifiable through the Turkish Trade Registry Gazette or the Revenue Administration portals.

2) Payment Methods and SSL: Legitimate businesses use virtual POS gateways from licensed payment providers and require 3D Secure verification. Steer clear of sites asking for wire transfers to a personal IBAN or charging credit cards directly without SMS confirmation. Note that the padlock icon in the browser address bar only indicates encrypted traffic; it is never proof of a legitimate business.

3) Domain Age and Legal Policies: Always check the domain registration date; newly registered domains that are just one or two weeks old or contact pages that only provide a web form or a mobile phone number, are major red flags. Never shop on sites that omit registered legal entity details from their Distance Sales Agreement and Preliminary Information Form.

VVeli T***Member
Job title
Human Resources Specialist
Sector
Agriculture
Organization type
120-person company
Joined
Apr 2023
Message
1
#3

The biggest trap people fall for is the green padlock icon or SSL certificate. SSL is free nowadays and can be set up in seconds; all it means is the connection is encrypted, not that the site is honest. What you actually need to check is the tax registration of the company issuing the invoices.

ZZaferMember
Job title
Insurance agency
Joined
May 2024
Message
88
#4

The quickest practical tip you can give your clients is this: go all the way to the checkout page. If there is no 3D Secure confirmation code sent to their phone or if the page says "technical issue, please transfer money to this account," close the tab immediately.

CCerenMember
Job title
QA Tester
Joined
Mar 2024
Message
178
#5

Even an ETBİS registration isn't a 100% guarantee on its own. There have been cases where someone incorporated, registered with ETBİS, took orders for a few months, never shipped anything and went under. ETBİS is a must but it always has to be cross-checked with delivery history on independent consumer complaint platforms.

ÖÖmer D***Member
Job title
Field sales representative
Sector
Automotive aftermarket
Organization type
medium-sized business
Joined
Aug 2024
Message
341
#6

nobody's gonna sell an item worth 12 thousand lira on the market for 1800 lira anyway. the biggest verification is a common sense filter. like before any official check customers need to question how realistic the price is.

AAleyna E***MemberCommunity member
Joined
Aug 2024
Message
80
#7

Add these items to your checklist as well: 1) Check the dates of their social media accounts' first posts and see if comments are turned off. 2) Call the landline number on the contact page during business hours to see if a corporate switchboard answers. 3) Be skeptical if only a neighborhood is listed instead of a full address on the site.

HHüseyin Ö***Member
Job title
Accounting Manager
Sector
Agriculture
Organization type
medium-sized business
Joined
Feb 2025
Message
15
#8

An acquaintance of mine got scammed out of 2,200 TL just like this last month. They had made an exact clone of a real brand's website, adding just a single letter to the domain name. The interface was flawless, but on the checkout screen, the money was pulled directly without an approval code ever arriving.

TTaner E***MemberCommunity member
Joined
Apr 2023
Message
118
#9

Roughly two-thirds of the similar complaints we receive originate from sites opened via heavy-discount links in social media ads with domain registrations under 15 days old. Just checking the domain registration date prevents a huge portion of these scams.

AAli P***MemberCommunity member
Joined
Oct 2023
Message
69
#10

Under the Tüketicinin Korunması Hakkında Kanun, it is a legal requirement for sellers in distance contracts to clearly state their full identity, address, and the terms of the right of withdrawal. Platforms that fail to include these statutory texts are directly subject to administrative sanctions.

SSena G***MemberCommunity member
Joined
Feb 2023
Message
356
#11

We experienced almost the exact same thing last year. When making decisions, write down the worst-case scenario too not just the best.

If you have questions, write them; I'll answer as best I can.

MMeryem K***Member
Job title
Graphic Designer
Sector
Leather
Organization type
family business
Joined
Jul 2025
Message
417
#12

I've been dealing with this for a long time. Start with a small trial; don't commit to everything at once.

That's all, sorry if I went on too long.

KKemal G***Member
Job title
Store associate
Sector
IT services
Organization type
medium-sized business
Joined
Apr 2023
Message
7

Doki · Incident response support · 2024

#13

I completely agree. When making a decision first look at what data you have on hand.

This is my opinion, I'm not claiming it's absolute truth.

FFatih K***Expert
Job title
Data entry clerk
Sector
Agriculture
Organization type
medium-sized business
Joined
Jun 2022
Message
228

Doki · Penetration test · 2025

#14

Could you elaborate on that? If you scold false alarms, nobody will report again.

ZZerrin U***Member
Job title
Logistics planning
Sector
Construction
Organization type
regional distributor
Joined
Aug 2022
Message
307
#15

My questions are cleared up, thanks. When making decisions, write down the worst-case scenario too, not just the best.

Most time waste accumulates in tasks waiting for approval. This is my opinion I'm not claiming it's absolute truth.

PPerihan K***MemberCommunity member
Joined
Jan 2023
Message
152
#16

You're right, I've been down that road too. The biggest time-waster for us was not knowing who had the final say.

Don't rely on a single measure; go layer by layer. If I were you, I'd go this route.

OOsman T***Member
Job title
Technical service technician
Sector
Furniture manufacturing
Organization type
a company within a holding
Joined
Jan 2022
Message
3
#17

Do you think this works at any scale? If the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

Hope this helps.

VVolkan A***Expert
Job title
Operations director
Sector
Jewelry
Organization type
cooperative
Joined
Nov 2022
Message
314
#18

We experienced almost the exact same thing last year. When you try to change everything at once nothing settles.

If you get three different answers on a topic, the question was asked wrong. If you post the result here, it will help others too.

HHüsniye E***MemberCommunity member
Joined
Sep 2024
Message
260
#19

Let me write how it's done in practice. Hasty decisions become decisions you have to fix six months later.

The real issue isn't the number, but what it's based on. If you have questions write them; I'll answer as best I can.

OOnur Y***Member
Job title
Product Manager
Sector
Furniture manufacturing
Organization type
two-branch business
Joined
Nov 2024
Message
9

Doki · Log management setup · 2024

#20

We need to make a distinction here. The answer varies greatly by industry; there is no one-size-fits-all rule.

Proven by experience.

Reply