Paying online safely: payment confirmations, receipts and the most common risks

Paying online: what to check before you confirm

The most critical moment of a payment is right before the final approval. The confirmation view of your bank or payment service should show details that match your order.

Amount

Check that the amount matches the final total shown at checkout, including delivery costs.

Currency

In a Finnish store the price is usually in euros. If the confirmation shows a different currency, find out why before approving.

Payment recipient

The merchant or payment intermediary shown in the confirmation view should be identifiable. An unfamiliar name does not always mean fraud, but it must be possible to explain it.

Do not approve an unexpected confirmation

If your phone receives a payment approval request when you are not making a purchase yourself, do not approve it.

Save the receipt, not the card details

The order number and the payment receipt are useful. A screenshot of the full card number is not.

Suspicious payment link

Parcel, bank and store scams can lead to a page that imitates a well-known service. Always go to the payment service from the store's own checkout, or type the service's address yourself.

If the payment appears twice

Do not make a third attempt before you have checked your account transactions and the store's order view. On a card, an authorization hold and the final charge can be separate transactions.

An authorization hold and the final charge can look like two transactions

With a card payment, the bank may first show an authorization hold and later the final charge. If the amounts are the same and the hold disappears, it is not necessarily a double charge.

A failed payment does not always mean a failed order

If the checkout shows an error, check the following before trying to pay again:

• whether an order confirmation arrived
• whether an order number was created
• whether a hold or charge appears in your bank.

This way you avoid paying for the same order twice.

Currency conversion

If you pay in a currency other than euros, the card company's exchange rate and any currency surcharge affect the final amount. Always compare the currency shown at checkout with the one in the bank's confirmation.

Payment intermediary name

The charge may show a payment intermediary or the company's legal name instead of the brand. The store should be able to tell you which name appears on the statement.

Check the payment status before trying again

If the browser shows an error after the payment, do not immediately press the pay button again. First check in your bank whether a charge or hold was made, and in the store's order view whether an order number was created.

Do not share a verification code with customer service

A one-time verification code from your bank or card is intended only for approving your own payment. An online store's customer service does not need it to look up an order.

You should be able to verify a successful payment in two places

Check the online store's order confirmation and the transaction in the payment service or bank. If one is missing, do not pay for the same order again straight away before the situation has been clarified.

A double payment easily happens precisely when the checkout shows an error message even though the bank has already charged the amount.

The payment confirmation must match the order

Compare the amount, currency and merchant name with what was shown at checkout. If the bank's confirmation shows a different amount or an unknown recipient, stop before approving.

A small difference can sometimes be caused by currency conversion, but it must be possible to explain it.

3-D Secure or strong authentication does not automatically make a store trustworthy

A secure payment confirmation protects the card transaction, but it does not guarantee that the online store itself will deliver the product. That is why the store's background and terms are checked separately.

Payment technology and seller reliability are two different things.

Do not approve a confirmation you did not start

If an unexpected payment request arrives in your banking app, reject it and check the situation directly in the bank's official app. Do not call a number given in a message or open a link just to find out about the request.

An unexpected confirmation may be related to an attempt to misuse card details.

Keep the receipt and the order confirmation

Keep at least the order number, payment date, amount, products and seller's details. A PDF or an email confirmation is usually enough.

Documents make both returns and any later payment investigation easier.

Saving a card is not necessary for a good user experience

If you do not need to make repeat purchases quickly, not saving your card details reduces the payment data left on your account. The online store should clearly state whether it saves the payment method or whether the payment service handles the data.

The user should be able to remove a saved payment method from the account.

Bank transfer and card payment offer different dispute resolution options

The rights and chargeback possibilities of different payment methods may differ. That is why, in an unfamiliar online store, choosing the payment method is part of risk management.

Check the terms of your own bank or payment service if the purchase is expensive or the seller is foreign.

Check the payment page's domain before entering your details

A scam page can imitate a familiar payment service. Check the address bar, the HTTPS connection and the spelling of the domain name.

The padlock icon alone does not guarantee trustworthiness, because a scam page can also use HTTPS.

After a failed payment, check your transactions before trying again

If the checkout keeps loading or shows an error, open your bank or payment service separately and check whether the transaction has been reserved or charged. If necessary, take a screenshot of the error message.

Only after that decide whether to try the payment again.

Payment security is a process, not a single symbol

A secure payment combines the right online store, the right payment page, the right amount, your own initiative and a saved confirmation. When all five match, the risk of an error or scam decreases significantly.

Choose the payment method in proportion to the value of the purchase

For a small purchase the most important thing may be speed, while for a more expensive one it may be the possibility of dispute resolution or a payment chargeback. Card, invoice and bank transfer offer different practical protection mechanisms.

Familiarise yourself with the payment service's own terms before a large purchase.

The merchant name on a card charge may differ from the online store's name

The statement may show the payment service or the legal company name. A good online store tells the customer about this when necessary, so that the customer does not interpret the charge as unknown.

If the name is completely unexpected, check the order confirmation before accepting the transaction as normal.

A hold and the final charge are different stages

With a card payment, the amount may first appear as an authorization hold. If the order is cancelled quickly, the hold may disappear without a separate refund transaction.

The bank's interface usually tells you whether it is a hold or a posted payment.

Note currency conversion in foreign stores

If the price is shown in euros but the charge is made in another currency, the card issuer may use its own exchange rate and additional fees. Check at checkout in which currency the final payment is made.

Do not automatically accept dynamic currency conversion without comparing prices.

Verify the authenticity of a payment link separately

Customer service may sometimes send a payment link, for example for an additional service, but an unexpected link must always be checked. Rather go to your own customer account or ask for confirmation through an official channel.

Do not enter payment details into a link just because the message looks professional.

Monitoring payment transactions is part of safe shopping

Check the transactions on your card or account regularly. A small unknown charge can be as important a finding as a large one.

If you do not recognise a transaction, contact your bank using its official channel.

Keep the error code of a failed payment

If the checkout shows a technical error, save the error code or a screenshot before trying again. Customer service or the payment service can often identify the problem faster based on it.

However, do not save the full card number or other sensitive payment data in the screenshot.

When there are several payment attempts, reconcile the transactions with the order number

If your bank shows two holds but the online store shows only one order, do not automatically assume two final charges. Check the status of the payments and, if necessary, contact the seller and the bank.

Remove a payment method from your user account if it is no longer used

Removing old cards and payment methods reduces confusion at the next checkout. If a card has expired or been closed, keeping it on the account brings no benefit.

Check the payment currency and taxes before confirming

In an international online store, the final total shown at checkout may change because of tax, delivery or currency. The confirmation view should show the final amount before the payment is approved.

Do not approve a payment based only on the earlier price in the shopping cart.

A payment refund may appear in the bank under a different name than the original charge

A card refund may appear as a separate credit transaction or as a change to the original transaction. Check the amount and date before assuming that the refund is missing.

If the refund does not match the amount stated by the seller, ask for a breakdown.

A secure payment process does not ask for unnecessary credentials

An online store does not need online banking passwords, PIN codes or the full security code of a card in a customer service message. Strong authentication takes place in the bank's or payment service's own secure environment.

An unusual request is a reason to stop and check the matter through an official channel.

Go to the payment page only from the online store's own checkout

Safe payment begins even before you enter card or bank details. You should arrive at the payment page directly from the online store's checkout, not via an email, text message or advertising link. This reduces the risk of ending up on a scam page that imitates a real payment service.

Check the domain name in the address bar before entering your details, especially if the layout looks slightly different from usual.

The amount in the payment confirmation should match the shopping cart

Before confirming, check the amount, currency and recipient. If the amount shown in the banking app or payment service differs from the one shown at checkout, do not approve the payment until the matter has been clarified.

Note small additional charges too. Delivery, any service fees and discounts should be clearly visible before the final confirmation.

The receipt and the order confirmation serve different purposes

The order confirmation tells you what was ordered from the online store, while the payment receipt or the payment service's transaction verifies the payment. It is a good idea to keep both at least until the order has been delivered and any returns or complaints have been handled.

If an amount is questioned later, comparing these two documents makes the investigation easier.

A saved payment method adds convenience but also information to be stored

If an online store offers the option to save a card or other payment method, the choice should be a conscious one. In a store you rarely use, saving is not necessarily needed. If a payment method is saved, the user account password and any multi-factor authentication become more important.

After payment, check both the online store and your own bank

A successful payment usually appears as an order confirmation in the store and as a transaction on the payment method. If one is missing, it is best not to attempt the payment repeatedly until it is clear whether the payment failed or the confirmation is delayed.

At worst, repeated pressing can create several authorization holds.

In a scam situation, quick documentation helps

If a payment looks suspicious, it is a good idea to save the web page, the transaction details and any messages. After that, contacting the bank or payment service is easier to do on the basis of facts.

Card details or credentials should not be sent in ordinary email, even when the matter is being resolved with customer service.

Consider returns too when choosing a payment method

Different payment methods process refunds at different speeds. Card payment, online banking and a payment service may all show a refund differently. Before buying you do not need to know the whole payment system, but it is good to know where the original refund usually goes.

An authorization hold does not always mean a final charge

With a card payment, the amount may first appear as a hold and only later as a final charge. If the order fails, the hold may be released automatically according to the bank's schedule. That is why the same payment should not be repeated many times just because the first transaction does not immediately appear as final.

The look of the payment page may change without the service being fake

The user interface of a bank or payment service may be updated. Security should be assessed based on the domain, the payment amount and the recipient, not on whether the page looks exactly the same as last time.

Payment details should not be sent to customer service in an ordinary message

Full card details, online banking credentials or passwords should not be sent by email or chat. Genuine customer service does not need them to look into an order.

Find out about a failed payment before trying again

If the payment is interrupted midway, first check the order history and your bank. This avoids a double payment or several unnecessary authorization holds.

Learn to recognise the name of the payment transaction on your statement

The name shown on the statement may be that of the payment service or a legal company, not the online store's brand. If the name is completely unfamiliar, compare it with the order confirmation before worrying.

Payment security is improved when the course of the payment is predictable

At checkout it should be clear which payment service opens next and what amount is being confirmed. If the browser unexpectedly redirects to an unfamiliar address or the amount changes without explanation, it is best to stop the process.

A convenient payment method must not mean carelessness

A saved card, one-click payment or a mobile wallet speed up shopping, but it is still worth checking the amount and the store's name on the confirmation screen every time.

A delayed refund does not usually mean the money has disappeared

The seller may issue the refund immediately, but the bank or payment service shows it only later. It is worth keeping the refund date and the original payment method so that the delay can be followed up in the right place.

Read the error message of the payment terminal or browser before trying again

If the payment fails, the message may tell the reason, such as interrupted authentication or a technical fault. Repeating the same attempt without checking may cause several holds.

When paying in a foreign currency, check the currency too

If the store shows the price in euros but the payment confirmation is in another currency, it is worth understanding the conversion and any fees before approving.

An email after payment alone does not prove a charge

The order confirmation and the bank transaction should be distinguished from each other. If one is missing, the situation is clarified before paying again.

The final payment check takes only a few seconds

Before confirming, check the store, amount, currency and chosen payment method. This small routine prevents a surprising number of errors and makes it easier to spot an unusual payment.

For safe payment, the most important thing is that the whole chain remains understandable from the checkout to the bank's confirmation. If any step looks unusual, you can always stop the payment and check the situation before trying again.