
Open 24 hours a day from anywhere in the world, online shopping sites entice consumers with an array of come-ons such as free shipping, comparison pricing, bargain deals and extra security features.
Yet, the question remains for the leery: Can online shopping be done safely?
The Internet security experts we spoke with say "yes" -- on the condition that consumers abide by some basic safety tips.
1. Bigger names equal better protection.
"Go with reputable companies you've heard of," says Jim Stickley, co-founder of TraceSecurity, a company that specializes in network security.
Stickley says that if a deal sounds too good to be true -- say, $20 for an iPod Nano -- it probably is. What's worse, it's probably an attempt to trick you into giving out personal information.
One comparison shopping site, buysafeshopping.com, solves both problems by screening and bonding qualified merchants for up to $25,000.
2. When in doubt, check them out.
If you go with an unknown merchant or Web site, contact someone there who can verify the company's privacy policy. Ask if they'll send you a catalog.
"If they don't list phone numbers and only have an e-mail address, that's a huge red flag," Stickley says. "Call and see if it goes to voice mail. Anyone can have voice mail."
Bottom line: If you can't get a human being on the phone or don't like what you're hearing, go shopping somewhere else.
3. Encryption doesn't equal security.
Expert gift-giver Leah Ingram, author of "Gifts Anytime: How to Find the Perfect Present for any Occasion," says that before typing in your credit card information, look for the "plural URL." When you go to the site's checkout page, the "http" in the URL should change to "https." A closed padlock or key should also appear on the page, letting you know your information will be encrypted.
If you don't see either of these "locked" icons or a change in the URL, log out and shop elsewhere, says Ingram.
Even if you see a proof of encryption, don't equate that with the site's trustworthiness.
"It just means the session is encrypted," says Stickley. He likens the mistaken belief to believing that someone owns a house just because that person can lock the front door. It means nothing. To verify the site's trustworthiness, he advises calling the company to ask about its privacy policy.
4. When sharing is a bad thing.
Shared computers, such as the ones available to multiple strangers at computer centers, are a big no-no, says Branigan.
The danger is that hackers can insert a keylogger, a monitoring device captures everything you type before it's encrypted. The best thing to do is avoid shared computers when typing sensitive information.
5. Pay with a credit card.
"The last thing you want to use is a debit card," Stickley says. "Most credit cards have protection on them -- if someone rips you off, you can dispute the charge. Debit cards pull money right from your bank account. It can take months to get your money back, if you ever see it again."
Be sure to print and save all of your receipts and e-mail confirmations in case of a dispute.
6. Suspect the suspicious.
If you're at the checkout page and the site asks for your date of birth and Social Security number, be very careful.
"This combination can give people enough information to start applying for new credit cards in your name," Branigan says.
Also be wary of sending out credit card information via e-mail or instant messaging, says Branigan. Neither is encrypted. Copies can remain on your mail server as well as theirs. Since you can't control who's looking at your information, stick to the site's secure transaction page.