Why I Stopped Paying for Anything Online With My Debit Card

People assume online shopping safety comes down to spotting a dodgy website, and while that matters, I've come round to thinking the single most useful protection has almost nothing to do with the site itself. It's how you actually pay for the thing you're buying. Get that one decision right and a scam turns from a disaster into an afternoon's inconvenience.

The Legal Protection a Credit Card Gives You That a Debit Card Doesn't

In the UK, Section 75 of the Consumer Credit Act makes your credit card provider jointly liable with the seller for anything you buy costing between £100 and £30,000. If the item never turns up, the company goes bust before it ships, or the goods are seriously not as described, you can claim the money back from the card provider directly rather than chasing the retailer yourself. I found this out properly a few years ago when a furniture company I'd ordered from went into administration between taking my payment and delivering anything, and the claim back through my credit card provider was straightforward. Debit cards only have the chargeback scheme, which is a voluntary arrangement between banks rather than a legal right, and it's noticeably weaker and slower in practice. That difference alone is why any card details I hand over for an online purchase now belong to a credit card, even for things I'm fairly confident about.

Checking the Shop Itself Comes Before Any of This

None of that payment protection matters much if I'm about to hand my details to a shop that was never going to deliver anything in the first place. I've written before about how I decide whether to trust a new online shop before I get anywhere near checkout, and that step still comes first every single time, no matter how good the payment method behind it is. Payment method is damage control for when something goes wrong. Vetting the seller properly is what stops most of that damage happening at all, and it takes less time than people expect once it's a habit.

The Checkout Habits I Rely On No Matter Which Card I'm Using

Once I've decided a shop is worth buying from, I still go through the same checkout habits regardless of which card is doing the paying. I've covered the checkout red flags I watch for in more detail elsewhere, but the short version here is that I never let a site save my card details after a single purchase, and I always screenshot the order confirmation page before closing the tab. Neither habit depends on which card I used, but both make a dispute far easier to raise if I ever actually need to.

Every Shop Gets Its Own Password, Never a Reused One

Payment method aside, most online shops also want an account, and that means another password sitting somewhere with my card details and address attached to it. I use a password manager to generate a completely unique password for every shop I buy from, including the ones I'm only ever going to use once for a single order. If one of those accounts ever gets breached, and smaller retailers get breached more often than people tend to realise, the damage stays contained to that one account instead of spreading to everything else I own through a reused password.

The One Payment Request That Makes Me Walk Away Immediately

There's one situation where none of this nuance matters and I just stop entirely: any seller asking for payment by bank transfer or gift card instead of a card. I've seen this most often on marketplace listings, where a seller asks to move the conversation off-platform and pay directly, which strips away every buyer protection in one move. Legitimate shops simply don't need to ask for this. The NCSC has solid general guidance on spotting this kind of pressure before you've handed anything over, and it's worth reading once so you recognise it instantly the next time it comes up. If you want a simple place to keep all of this straight as you shop, my free Safety Toolkit walks through the same checks in the order I've laid them out here.