PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Shop Safe: These 4 Tricks Changed How I Buy Things Online

Before signing up for yet another online shop, learn how to protect your credit card number, email address, and phone number from both vendors and cybercriminals.

 & Kim Key Senior Writer, Security

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS
(Credit: René Ramos; boonchai wedmakawand/Moment, Hand-robot/iStock via Getty Images; KanawatTH, Aqsa)

I recently inherited an electric guitar, so I’m in the market for an interface adapter to record my haphazard strums using my iPad. I’m shopping online for one now, and while I’m eager to awaken my inner rock goddess as soon as possible, I also want to give up as little personal information to vendors like Amazon as I can. I just don’t trust companies with my data anymore, because most companies aren’t in the business of protecting customers. 

Sure, maybe I’m cynical; I do write about cybercrime and online privacy threats every day. But think about it: Whenever a company loses, sells, or shares customer information, like credit card numbers, passwords, names, or physical addresses, there’s a rash of scary headlines trumpeting the need to change your passwords or cancel your credit or debit cards. The company takes the public relations damage, pays a small fine after months or years of litigation, and the cycle happens again. In other words, when cybercrime occurs at a company, it's always the customers who suffer, not the company. 

The best way to keep information safe is not to offer it in the first place. That’s why I’m trying to find new ways to hide my data while still enjoying the convenience of online shopping. 

So, to buy the guitar adapter that I want, I’ll need to give away, at minimum, my initials, home address, phone number, and credit card number to an online retailer. How can I do this without opening my data up to potential snoops and keeping it out of vendors' databases? Come along on my semi-anonymous shopping trip.


1. Mask Your Credit Card Number

I started my journey by signing up for my credit card company’s data protection services. Companies like American Express, Capital One, and Citibank all offer number masking services in addition to other identity protection features like credit monitoring and fraud protection. 

A virtual card is helpful because if the number is lost or stolen, your real card is perfectly safe. You won’t need to go through the trouble of getting a new card from your bank or other issuer, and you won’t risk hits to your credit score. Also, when you’re done shopping, you can disable your virtual card number, so no one else can use it later. I suggest seeking services that let you set an expiration date for the virtual card so you don’t have to remember to change the number or delete it when you’re done. 

(Credit: American Express/PCMag)

Here’s a basic overview of how credit card number masking through your card issuer works: 

  1. Install a browser extension from the company. 
  2. When you reach a checkout screen, you’ll receive an auto-generated card number via the card issuer’s browser extension.
  3. Complete the transaction, effectively hiding your real credit card number.

Not every card company follows the exact procedure outlined above. However, in most instances, the card issuer will generate a virtual card number for you, and you can use it everywhere you’d normally use your credit card number.


2. Sign Up for Identity Protection

Being secure online is usually less important to people than getting things done quickly. I’m not judging, I’m the same way. That’s why I recommend using identity protection apps and extensions. For example, Editors’ Choice winner IronVest not only masks your credit numbers, it also generates fake email addresses and phone numbers for you. IronVest includes a password manager, too.

If that level of protection seems like overkill, you can always choose to hide some of your information on the checkout screen. For example, I used SimpleLogin’s open-source email address generator to create a fake email address to check out.

(Credit: SimpleLogin/Sweetwater/PCMag)

Some email address generators include helpful features like inbox access or the ability to scrub your information from the open web. Check out PCMag’s comprehensive list of the best personal data removal services we’ve tested.

Editors’ Choice winners NordPass and Proton Pass offer email masking features, too. I recommend checking your password manager’s settings menu to see if the app includes email masking. You use a password manager, don’t you? If not, or if you’re in the market for a new one, I’ve tested dozens of them and put the best ones on this list.

I already have a free phone number from Google Voice, so I used that too. I suggest using a burner number whenever you need to enter a phone number to check out while shopping. That way, if and when a company loses your number in a data breach or other security incident, and your phone number ends up on the dark web, you can generate a new number instead of enduring constant spam and scam calls and text messages. We also have a list of online services that provide secret phone numbers you can use while shopping or doing anything else online.


3. Keep Your Home Address Secret

My next suggestion for creating a private online shopping experience is to set up a virtual mailbox to hide your real physical location. You can do this in person by renting a mailbox at your local post office or a mailbox rental service like Pak Mail or UPS. There are also online services, like iPostal1, that offer virtual mailing addresses. These services can forward your mail and packages to your home or to a nearby location for pickup. I already have a PO Box, so I opted out of signing up for a virtual mailing service. 

(Credit: Sweetwater/PCMag)

I could successfully fill out all of the form fields required to buy equipment on Sweetwater using just my initials, a PO Box address, a fake email address, and a phony phone number. Making my shopping experience more private took only a few minutes, and with everything set up, checking out should take even less time in the future.


4. Change the Way You Pay

Of course, I could mask all of my personal data from online stores by using a mobile payment app like Apple Pay, Cash App, Google Pay, or Samsung Pay. These services prevent the seller from seeing your credit card number at all, not even a masked version. They're also incredibly convenient, which may be their real draw. You don’t have to enter your email address or phone number at all, and checkout is usually done with just one click or tap. 

These conveniences come with a few drawbacks. Token-based services or mobile payment apps can make it hard to change your mailing addresses or phone numbers at checkout, and while most online stores accept major credit cards, not all retailers accept mobile payment apps.


TL;DR: Don’t Trust Retailers With Your Personal Data

You are the only person who can keep your data private and secure. If you want to reduce the spam in your inbox, the scam calls to your phone, and the chances that your credit card number could fall into the wrong hands, it’s worth it to take time to hide that information. Don’t trust companies to act in your best interest.

Consider using some of the services described above to make your online shopping experience a little more private in the future. Before downloading any new apps, use my privacy policy cheat sheet to read the terms documents faster. To continue leveling up your privacy habits at home, check out our list of essential apps for online privacy.

About Our Expert

Kim Key

Kim Key

Senior Writer, Security

My Experience

I review privacy tools like hardware security keys, password managers, private messaging apps, and ad-blocking software. I also report on online scams and offer advice to families and individuals about staying safe on the internet. Before joining PCMag, I wrote about tech and video games for CNN, Fanbyte, Mashable, The New York Times, and TechRadar. I also worked at CNN International, where I did field producing and reporting on sports that are popular with worldwide audiences.

In addition to the categories below, I exclusively cover ad blockers, authenticator apps, hardware security keys, and private messaging apps.

The Technology I Use

I like testing new software for work, but I'm less "plugged in" to the internet than I used to be. I tend to read app privacy policies to see what kind of data companies collect, and as a result of those findings, I don't use many mobile apps. In a similar vein, I was an early adopter of many social media platforms, but now I’m just an infrequent Reddit lurker.

I'm a gear junkie. I split my work time between a 2021 Apple MacBook Pro and a Lenovo ThinkPad. I shoot most of my videos for PCMag using a Canon M50, a Sony A7iii, and a Sony a6000. I edit videos using Final Cut Pro and Adobe Premiere Pro.

I write all of my words for PCMag either in the MS Notepad app on my ThinkPad or the Notes app on my iPhone 12 mini. If I'm traveling and working, I use my iPad to write short articles or take notes.

My dad built me my first computer sometime in the late '90s, and I used it for reading Encyclopedia Britannica and writing Sailor Moon fan fiction. My first phone was the ubiquitous Nokia candy bar.

Read full bio