Is instacart.com legit or a scam?
Official Instacart website (Nasdaq: CART) — legitimate grocery-delivery platform with clean technical signals, though the service has documented customer-service and security complaints.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
Instacart.com is the genuine domain of a major, publicly traded company (Maplebear Inc., ticker CART on Nasdaq). The domain is nearly 30 years old, registered with Amazon Registrar, and carries a valid SSL certificate from Amazon. Our antivirus network and browser blocklists show no malicious flags, and the hosting IP has zero abuse reports. The evidence package confirms the company's legitimate registration in Delaware (incorporated 2012) and San Francisco headquarters. However, the platform has attracted significant complaints — an independent review aggregator shows a 1.2/5 rating from ~12,000 reviews, and the BBB lists 8,161 complaints over three years. News reports and customer accounts describe shopper theft, gift-card replacement scams perpetrated by bad actors using the platform, phishing emails impersonating Instacart, and service failures. These are real problems, but they reflect fraud occurring *on* the platform (by individual shoppers or scammers) and poor customer service, not fraud by the company's website itself. The site is safe to visit and use.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for instacart.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- instacart.com is the official website of Maplebear Inc. (dba Instacart), a publicly traded (Nasdaq: CART) grocery delivery company founded in 2012 and headquartered in San Francisco, CA.
- Domain age of 10,815 days (~29.6 years) predates the company; consistent with early registration for the brand.
- Numerous news reports and customer complaints about shopper theft, gift card replacement scams on the platform, phishing emails impersonating Instacart, and account issues.
- Trustpilot shows 1.2/5 rating from ~12,000 reviews, with frequent complaints about poor customer service, missing/incorrect items, late deliveries, and refund problems.
- BBB reports 8,161 complaints in the last 3 years; business is not BBB accredited.
- Reddit threads frequently discuss customer and shopper scams involving the Instacart platform, fake emails, and service dissatisfaction.
- Company has faced legal action (e.g., California case on worker misclassification) and a $60M FTC settlement over deceptive practices like hidden fees.
- WLWT Newsopen
"Instacart scam affecting local shoppers, costing people hundreds of dollars per case. Scam cases are popping up around the country, including Dallas, Memphis, Indianapolis and Cincinnati, raising questions about Instacart, their vetting pro"
- Business Insideropen
"Scammers are using delivery apps like Instacart to swindle customers and delivery workers out of money. A scam involves replacing items in an Instacart order with gift cards."
- Trustpilotopen
"Instacart is the absolute worst excuse for a business Ive ever known. You have billions of poor reviews because you dont care about your customers."
- BBB Scam Trackeropen
"no-reply@instacart.com INSTACART+ Join You paid $925.45 PayPal.If this charge is not for your the goods fee Quickly reach us at+19832202326 on Instacart as a Buyer. Business name: Instacart IMPOSTER."
Maplebear Inc. (d/b/a Instacart), incorporated in Delaware on August 3, 2012, headquartered in San Francisco, CA. Publicly traded (Nasdaq: CART). Registered as foreign entity in California.
News outlets (WLWT, Business Insider) and consumer-complaint sites (an independent review aggregator, BBB, Reddit) document significant issues with the Instacart service: shoppers stealing items and replacing them with gift cards, phishing emails impersonating Instacart, account security breaches, and poor customer service. an independent review aggregator shows a 1.2/5 rating from ~12,000 reviews. The BBB lists 8,161 complaints over 3 years. However, these complaints reflect operational failures and fraud perpetrated by bad actors *using* the platform, not fraud by the official website. The company is a legitimate, publicly traded entity (Nasdaq: CART) that has faced regulatory action (FTC settlement for hidden fees) but is not itself a scam operation.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No postal address visible on the page.
- Phone number listed (22933079).
- Links to 4 social profiles.
Domain & Encryption
Redirect Chain
- 1301http://instacart.com/
- 2200https://www.instacart.com/cross-domain
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on instacart.com and not a lookalike like i-nstacart.com.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on instacart.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- instacart.com passed our automated security checks with a trust score of 88/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. instacart.com presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 165 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- instacart.com is 29.6 years old, registered on 10/31/1996 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report instacart.com as clean.
- No. instacart.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- instacart.com resolves to an IP operated by Amazon.com, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. instacart.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.