Does the Padlock or HTTPS Mean a Bag Shop Is Safe?

No. The FTC says that “https” at the start of the address means the site is encrypted, but it doesn’t mean it is a legitimate site, because scammers know how to encrypt sites too. It is a sign of a secure connection, not an honest seller.

What the FTC says

• Make sure the pages where you register, sign in and pay are secure by looking for https at the beginning of the URL.
• The “s” means the site is encrypted, but it does not mean it is legitimate.
• Scammers know how to encrypt sites too.
• Before you buy, search online for the site’s name with the word “complaint” or “review”.
• Check the seller’s ratings, contact information, terms and conditions, shipping fees and return policies.

What the padlock does show

It shows that the data between your browser and the site is encrypted. That protects you from some kinds of snooping, but not from a seller that does not deliver.

What to check as well

1. Search for complaints.
2. Look for a physical address and contact details.
3. Read the return policy.
4. Check that the price is not far below others.
5. Pay by credit card.

A better set of questions

Instead of asking whether the site looks secure, ask whether the shop has a history, whether anyone has complained, whether it gives a real address, and whether you can get your money back if the bag does not come. Those are questions that the padlock cannot answer, and they matter much more once the payment is made.

Where this answer stops

This is general advice. A site with https and a good reputation is still not certain to be honest, so use a payment method with recourse.