Six rules for safe online shopping
Check the checkout URL: the domain must belong to the store itself, not a lookalike.
Never enter card details on a site that asks for a coupon code. A coupon is only used at the store's checkout; any page asking for card data to "verify" a code is fake.
Treat "90% off" links circulating on social media with suspicion. Confirm the campaign on the store's own site, use a virtual card, and prefer registered payment methods.