Online Shopping Safety in Australia 2026: How to Shop Safely and Get Your Money Back

The Australian Consumer Law gives you automatic protections when buying from any Australian business - online or in-store. These are called statutory consumer guarantees, and they apply regardless of what the retailer's own returns policy says.

Under the ACL, products must:

• Be of acceptable quality (safe, durable, free from defects)
• Match their description and any images shown
• Be fit for the purpose they're sold for

If a product fails to meet these guarantees, you're entitled to:

• Repair or replacement for minor failures
• Full refund for major failures (you don't have to accept a repair if the problem is significant)

This applies whether you bought from a big retailer or a small online store. The catch: these protections apply to Australian businesses. Buying from overseas sellers (Temu, AliExpress, DHgate, etc.) means you're largely relying on the platform's own buyer protection program rather than ACL.

Scam websites have become increasingly sophisticated. Here's how to protect yourself:

Check the domain and business credentials:

• ASIC's ABN Lookup (abr.business.gov.au) lets you verify whether an Australian business is real and registered. No ABN listed on an Australian-claiming site is an immediate red flag.
• Check domain age using tools like WHOIS - a "shop" that's only 2 months old selling electronics at 70% off deserves serious scrutiny.
• Look for physical address, ABN, and Australian contact details in the footer.

Verify the secure connection:

• Look for "https://" in the URL - the padlock icon indicates an encrypted connection. Note: this does NOT mean the site is legitimate. Scam sites use HTTPS too. The padlock just means your data is encrypted in transit, not that the recipient is trustworthy.

Red flags to act on:

• Prices significantly below market value with no explanation
• Only accepts direct bank transfer, cryptocurrency, or gift cards (no credit card option)
• Extremely generic or poorly written product descriptions
• No clear returns policy or customer service contact
• Reverse image search product photos - scammers frequently steal images from legitimate retailers

Use Google's transparency report: Google's Safe Browsing tool (transparencyreport.google.com) lets you check a URL for known phishing activity.

Your choice of payment method determines how much recourse you have if something goes wrong.

Credit card (best protection): Credit cards provide chargeback rights - your bank can reverse a transaction if goods don't arrive, arrive damaged, or don't match the description. This is independent of the retailer's cooperation and applies even if the merchant has "no refunds" as their policy. Australian credit card issuers are required to process chargebacks under card scheme rules.

PayPal: Strong buyer protection program. PayPal's dispute resolution covers non-delivery and significantly not as described claims. Resolution typically within 10–30 days.

BPAY: Limited recourse. BPAY is designed for bill payments - it's not suitable for purchasing goods from unknown sellers.

Direct bank transfer (avoid for unknown sellers): Once a bank transfer is sent, recalling it is extremely difficult. Never use direct transfer for first-time purchases from sellers you don't know personally.

Buy Now Pay Later (Afterpay, Zip, etc.): BNPL platforms offer their own dispute processes, but they're less robust than credit card chargebacks. Use with caution for higher-value purchases.

If you've been cheated by an online purchase:

1. Contact the merchant first - document your attempt in writing (email). You need to show you tried to resolve it directly.
2. Gather evidence: screenshots of the listing, order confirmation, delivery tracking (or lack thereof), and all communications.
3. Contact your bank: Call the number on the back of your card and say "I want to dispute a transaction / initiate a chargeback." Provide the evidence.
4. Act within the time limit: Chargebacks generally must be initiated within 120 days of the transaction (Visa/Mastercard standard). Don't delay.

The bank will investigate and provisionally credit your account while the dispute is processed. Win rate is high for clear cases of non-delivery or fraud.

eBay's Money Back Guarantee covers most purchases - if an item doesn't arrive or doesn't match the listing, eBay will refund you even if the seller won't. Use eBay Checkout (do not pay offline) to ensure protection applies.

Facebook Marketplace has more risk. For purchases with "checkout" through Facebook, some buyer protection applies. For cash-in-person or bank transfer transactions, you're relying entirely on the seller. Tips:

• Meet in public, in daylight
• Test electronics before paying
• Use PayID, which shows the account name before you confirm transfer
• Google the seller's profile - fake Facebook accounts typically have limited history

Australian retailers must clearly state their returns policy. However, a "change of mind" policy is at the retailer's discretion - they're not legally required to accept returns for change of mind (that's a courtesy, not a right).

For faulty or misdescribed items, ACL rights apply regardless of any policy. Email the retailer referencing your ACL rights explicitly - this often resolves disputes faster than polite requests.

If the seller refuses: escalate to your state's consumer protection body (NSW Fair Trading, Consumer Affairs Victoria, etc.) or lodge a complaint with the ACCC.

Online shopping overlaps with online giveaway scams - a common vector is fake "prize winner" notifications designed to collect credit card details or personal information.

Legitimate prize draws and membership programs have:

• A registered ABN (searchable on abr.business.gov.au)
• Published past winners
• Clear, publicly available terms and conditions
• Live draws rather than unverifiable "random selections"
• No requirement to pay to claim a prize

Roopon, for example, holds ABN 89 656 278 830 (verifiable at abr.business.gov.au), draws prizes live on YouTube on the schedule in each campaign’s terms, and publishes winner information transparently at roopon.com/giveaways. That's the benchmark of a legitimate operator.