boohoo.com presents a confusing picture for shoppers. On one hand, the domain has been registered since 1997, which is a strong sign of longevity. It has solid technical security, a clean reputation record, and infrastructure that suggests real investment. On the other hand, for an e-commerce site that asks for your credit card and address, the absence of basic consumer protections is alarming. There is no privacy policy, no terms of service, no obvious contact information on the homepage, and no about page explaining who runs the business. Most established fashion retailers prominently display their return policy, company details, and customer service channels. Boohoo.com does not. While the technical signals are mostly positive, the transparency and compliance gaps are too wide to ignore. If you are asking 'is boohoo.com a scam', the honest answer is that the evidence is not sufficient to call it a scam, but it is also not sufficient to call it a legitimate store. The safest move is to buy from a retailer that clearly shows its legal documents and contact information. There are plenty of well-documented alternatives where you can shop with confidence.
In plain English
I wouldn't buy from boohoo.com right now. The site has been around for decades and has decent security, but it's missing basic things an online store needs: a privacy policy, terms of service, a contact page, and any info about who runs it. That combination is a red flag for an e-commerce site handling your money and personal data.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Solid security posture with modern TLS encryption, enforced HTTPS, and a content security policy that helps block common attacks. Google sees no threats, and the site uses a reputable CDN.
The domain has been registered for 28 years, which is a strong signal of an established business. However, ownership is somewhat opaque — the registrar is a large provider, but there's no clear company or team page to identify who runs the site.
Clean on all blacklists and has a web archive history going back 29 years, confirming it's been around for decades. Traffic is moderate for a major retailer, which is consistent with a long-standing brand.
This is a significant gap for an e-commerce site. No about page, no contact information on the homepage, and missing legal pages. A legitimate online store should clearly show who they are and how to reach them — the absence is concerning.
For a site selling clothing and collecting payment details, missing privacy policy and terms of service is a serious compliance failure. These documents are legally required in many jurisdictions and are a basic expectation for any store.
The infrastructure is well set up: AWS CloudFront CDN, multiple name servers, and email authentication that rejects unauthenticated messages. This level of investment is typical for a large commercial operation.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.