How to Build Customer Trust in an Online Store

Shoppers trust an online store when it removes their doubts before they reach the card form: genuine reviews on product pages, a returns policy they can find and understand, the full price including shipping shown early, real contact details, and a checkout that looks and is secure. Distrust costs real orders. In Baymard Institute's 2025 checkout survey, 19% of US adult internet users said they had abandoned a checkout in the last 3 months because they "didn't trust the site with their credit card information."

Key facts

• 19% of US shoppers abandoned a checkout because they did not trust the site with their card details (1,026 respondents, 2025) (Baymard Institute).
• 13% left because the returns policy was not satisfactory, and 12% because they could not see or calculate the total order cost up front (Baymard Institute).
• 270% higher purchase likelihood for a product with five reviews compared with one with none (Spiegel Research Center, Northwestern University).
• 4.0 to 4.7 stars is the range where purchase likelihood typically peaks; it falls as ratings approach a perfect 5.0 (Spiegel Research Center).
• August 14, 2024: the FTC announced its final rule banning fake reviews and testimonials, with civil penalties for knowing violators (Federal Trade Commission).
• 30 days is the default shipping window under the FTC's Mail, Internet or Telephone Order Rule when a store states no shipping time (Federal Trade Commission).

Why do shoppers stop trusting an online store?

Baymard surveys US shoppers about why they abandon, and once the people who were only browsing are set aside, several of the top reasons are about trust and transparency rather than price alone.

Reason given for abandoning an order	Share of US shoppers
Extra costs too high (shipping, tax, fees)	40%
Delivery was too slow	20%
Did not trust the site with credit card information	19%
Returns policy was not satisfactory	13%
Could not see or calculate total order cost up front	12%
Not enough payment methods	9%

Source: Baymard Institute, cart abandonment survey. Shoppers could pick more than one reason.

Usability research points the same way. Nielsen Norman Group found that the methods people use to judge whether a site is trustworthy have stayed stable over the years, and it groups them into four: design quality, upfront disclosure, comprehensive, correct and current content, and being connected to the rest of the web. It also notes that typos, broken links and other mistakes "quickly degrade credibility."

Do product reviews really increase sales?

Yes, and the effect starts with only a handful of reviews. The Spiegel Research Center at Northwestern University found that the purchase likelihood for a product with five reviews is 270% greater than for a product with no reviews, and that the marginal benefit of more reviews "begins diminishing rapidly after the first five reviews." For a new store, that means the first goal is to get every core product to five honest reviews, not to chase hundreds.

The same research found that reviews matter more as prices rise. When reviews were displayed, the conversion rate rose 190% for a lower priced product and 380% for a higher priced one (Spiegel Research Center). If you sell higher priced items, reviews deserve a prominent spot near the price and the add to cart button.

Perfect scores are not the target. Purchase likelihood typically peaks at ratings between 4.0 and 4.7 and then falls as ratings approach 5.0 (Spiegel Research Center). Shoppers read a wall of five star reviews as too good to be true. Showing negative reviews, and replying to them calmly with what you fixed, makes the positive ones more believable. The research also found that verified buyers leave more positive reviews than anonymous reviewers, so label reviews from confirmed orders.

Practical ways to collect reviews:

• Send one review request by email about a week after delivery, timed to when the product has had a chance to be used.
• Include a photo upload option; real customer photos answer sizing and color questions better than text.
• Ask every buyer, not only the happy ones, so the reviews shown reflect real experience.

Review apps handle the requests, verified buyer badges and display. See the best Shopify review apps for documented features and prices.

What does the FTC fake review rule mean for a small store?

The rule applies to any business selling to US consumers, whatever its size. The FTC announced the final rule on August 14, 2024, and it allows the agency to seek civil penalties against knowing violators. In plain terms, a store must not:

• Write or buy fake reviews. The rule covers reviews by people who do not exist, including AI generated ones, and reviews from people with no real experience of the product. Businesses may not create, sell or buy them.
• Pay for a particular sentiment. It bars "compensation or other incentives conditioned on the writing of consumer reviews expressing a particular sentiment," positive or negative. A discount offered only for five star reviews falls squarely inside it.
• Post undisclosed insider reviews. Reviews from employees, owners or their relatives must clearly disclose the relationship.
• Suppress negative reviews through "unfounded or groundless legal threats, physical threats, intimidation," or by "misrepresenting that the reviews on a review portion of its website represent all or most of the reviews submitted" when some were hidden for being negative.
• Buy fake social proof. The rule "prohibits anyone from selling or buying fake indicators of social media influence," such as bought followers or views.

How should a returns policy be written to build trust?

Baymard found that 13% of US shoppers abandoned an order because the returns policy was not satisfactory. The fix is often clarity, not generosity. A shopper wants four answers in under a minute:

1. How many days they have to return an item.
2. Who pays for return shipping.
3. Whether they get a refund, store credit or exchange.
4. Which items, if any, cannot be returned.

Put those four answers at the top of the policy page in plain sentences, then the details below. Link the policy from the footer, the product page near the price, and the cart. Shopify lets merchants publish return and refund, shipping, terms of service and contact information pages from settings, and its help center warns that its automated templates "aren't legal advice" and that merchants should make sure the content reflects their business practices. If you use a returns app, Shopify advises checking that the written policy matches the rules the app enforces. A policy that says one thing while the returns portal does another destroys trust fast.

How do you show shipping costs and delivery times honestly?

Extra costs are the most common reason for abandonment at 40%, and 12% of shoppers left because they could not work out the total cost up front. Show shipping prices or a free shipping threshold on the product page and in the cart, not only at the final checkout step. If duties or taxes apply to international orders, say so before checkout.

Delivery promises carry legal weight in the US. Under the FTC's Mail, Internet or Telephone Order Merchandise Rule, a seller "must have a reasonable basis for stating or implying that you can ship within a certain time," and with no shipping statement, it must reasonably expect to ship within 30 days. When an order will be late, the seller must seek the customer's consent to the delay and tell them they can cancel. Shopify's own guidance on policies says the same in shorter form: "Don't promise delivery or shipping times that you can't provide" (Shopify Help Center).

Give a delivery range you hit most of the time, send tracking links automatically, and email first when a delay happens.

Do HTTPS, PCI DSS and trust badges matter?

HTTPS encrypts the connection between the shopper and your store, and browsers flag pages without it. Google has used HTTPS as a ranking signal since 2014, though it described it as a "very lightweight signal" at launch, affecting fewer than 1% of global queries.

PCI DSS is the card industry's security standard. The PCI Security Standards Council was founded in 2006 by American Express, Discover, JCB International, MasterCard and Visa, and its standards are intended for entities that store, process or transmit payment account data or accept card payments. The easiest way for a small store to stay within scope is to never handle raw card numbers: use a hosted platform checkout or a payment provider's hosted fields, and never ask for card details by email or chat.

Perceived security is what shoppers actually see. Baymard's checkout testing found that a user's sense of security is largely a "gut feeling" directed by how visually secure the page looks, not the encryption they cannot see. It recommends visually encapsulating the card fields with a style used nowhere else in the form, for example a grey background, a padlock icon and short security microcopy. Familiar payment logos and wallets help too, since 9% of shoppers abandoned because there were not enough payment methods. Treat third party seals as a minor factor: Baymard's own site seal survey dates from 2013 to 2016, and 49% of its respondents had no preference among the seals shown. A clean, consistent checkout does more than a row of badges.

For gateways and their documented fees, see the best payment gateways for small business.

What contact details should an online store show?

Show enough that a shopper could reach a real business if something went wrong: a support email that gets answered, a phone number if you can staff it, a business address or at least the country you ship from, and your typical response time. Nielsen Norman Group lists upfront disclosure as one of the core ways a site communicates trustworthiness, and notes that people appreciate sites that are open with all information related to the customer experience. Shopify likewise reminds merchants to check that their public contact information "is accurate and suitable for customers" (Shopify Help Center).

Trust checklist for an online store

• Every page loads over HTTPS with no mixed content warnings.
• Checkout uses a hosted or tokenized payment form; the store never sees raw card numbers.
• Card fields are visually set apart, with a lock icon and a one line security note.
• Shipping cost or free shipping threshold appears on product pages and in the cart.
• Delivery time is a range you meet most of the time; late orders trigger an email.
• Returns policy answers window, return shipping cost, refund type and exclusions at the top.
• Policy pages are linked from the footer, product pages and cart.
• Contact page lists email, phone if staffed, location and response time.
• Every core product has at least five genuine reviews; all buyers get one review request.
• Negative reviews are shown and answered; no reviews from staff without disclosure.

Frequently asked questions

What is the fastest way to make a new store look trustworthy?

Fix what shoppers check first: real contact details, a short returns policy linked from product pages, the shipping price in the cart, a familiar checkout, and five genuine reviews on core products.

Should I hide negative reviews?

No. Purchase likelihood typically peaks at ratings of 4.0 to 4.7, not 5.0 (Spiegel Research Center), and the FTC rule bars suppressing reviews through threats or by implying the reviews shown are all or most of them.

Can I give customers a discount for leaving a review?

Never tie the reward to a positive review. The FTC rule bars incentives "conditioned on the writing of consumer reviews expressing a particular sentiment" (Federal Trade Commission). Check current FTC guidance before offering any reward for reviews.

Do I need to be PCI DSS compliant if I use Shopify or Stripe?

PCI DSS applies to any business that accepts card payments (PCI Security Standards Council). Using a hosted checkout or a provider's hosted payment fields keeps card data off your own systems, which usually shrinks what you have to secure. Ask your payment provider which compliance steps apply to your setup.

Do trust badges increase conversions?

The evidence is thin and dated. Baymard's site seal survey found 49% of respondents had no preference among seals, and its newer research stresses that a checkout which looks secure matters more than any single badge.

How long should my shipping time promise be?

Promise a range you can meet. If you state no time at all, the FTC's mail order rule requires a reasonable basis for shipping within 30 days, and late orders require the customer's consent or an option to cancel.