Security Review

Is temu.com legit or a scam?

Our verdict:Suspicious· 55/100

Legitimate but controversial marketplace with 6,095 BBB complaints, 1.9/5 an independent review aggregator score, and active regulatory lawsuits over data practices and counterfeit goods.

temu.comScanned 3h ago
0
Trust score
SUSPICIOUS
Heuristics 100·MT 42
Category tags
shoppingmarketplace#Fake Shop#Data Harvester72% MT confidence
Warning signals (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
23 years old
Registered Apr 29, 2003
MT Intelligence
Suspicious
Moderate likelihood · 72% confidence
SUSPICIOUS

Warning signs detected

Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of temu.com
LIVE RENDER
temu.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust42/100
MT AgentLive web researchVisual inspection
0%
Confidence
Temu is a real company — PDD Holdings operates it through US subsidiary Whaleco Inc., and the domain has been active for over 23 years with valid SSL and clean antivirus scans. However, the business carries serious red flags. The Better Business Bureau lists over 6,000 complaints, primarily about product quality, shipping delays, and refund difficulties. an independent review aggregator shows a 1.9/5 rating from 52,000+ reviews with recurring complaints of deceptive promotions and poor customer service. The Arizona Attorney General filed a lawsuit in December 2025 alleging unlawful data collection and counterfeiting; the FTC also secured a $2 million settlement in 2025 for violations of consumer-protection rules. While independent security researchers confirm Temu itself is not malware, the platform attracts third-party scams (phishing emails, fake gift cards, counterfeit listings). Buyers face real risk of poor-quality items, payment disputes, and data-privacy concerns — not from the domain being fake, but from the company's documented practices and the ecosystem it hosts.
Full dossier
Analysis complete

Page Content

The homepage displays a standard e-commerce layout with product listings, categories (clothing, beauty, home, jewelry), and promotional banners. The page loads cleanly with no malware or phishing indicators. Contact information is sparse — no email address or postal address visible, though 10 phone numbers are listed. No login form, countdown timers, or push-notification spam detected.

Infrastructure

Domain registered with MarkMonitor Inc., privacy-protected: false. SSL certificate valid (GoDaddy, 59 days to expiry). Hosting IP 151.101.2.58 has an abuse score of 0/100 with 13 historical abuse reports — typical for a major CDN. The site ranks in the global top-100k by traffic. Two redirects detected with cross-domain hops, but no homoglyph or IDN spoofing.

Domain History

Domain age: 8,447 days (~23 years), consistent with an established business. Registered to PDD Holdings subsidiary Whaleco Inc. (Delaware/Massachusetts). Business registration confirmed active in the USA. The long domain history and legitimate corporate structure distinguish this from typical scam sites.

Web Reputation

Antivirus engines: 0/92 flagged as malicious; browser blocklists clean. However, consumer-complaint databases show severe issues. Better Business Bureau: B rating (not accredited) with 6,095 complaints. an independent review aggregator: 1.9/5 stars from 52,000+ reviews. Arizona Attorney General lawsuit (Dec 2025) alleges unlawful data collection, privacy violations, and counterfeiting. FTC settlement (2025): $2 million penalty for INFORM Consumers Act violations. Multiple sources confirm Temu is a legitimate company but operates with documented regulatory and consumer-trust problems.

Risk Factors
7
  • 6,095 complaints filed with the Better Business Bureau, primarily about product quality, shipping delays, and refund difficulties.
  • an independent review aggregator rating of 1.9/5 from over 52,000 reviews with recurring complaints of deceptive promotions and poor customer service.
  • Arizona Attorney General lawsuit (December 2025) alleging unlawful data collection, privacy violations, and counterfeiting.
  • FTC settlement requiring $2 million penalty (2025) for violations of consumer-protection rules regarding seller disclosures.
  • No visible contact email or postal address on the homepage, limiting customer-service accessibility.
  • Platform hosts third-party scams including phishing emails, fake gift-card promotions, and counterfeit listings.
  • Data-privacy concerns documented in class-action lawsuits and regulatory filings.
Positive Signals
5
  • Domain age of 8,447 days (~23 years) with established corporate registration (Whaleco Inc., PDD Holdings subsidiary).
  • Valid SSL certificate and clean antivirus scans (0/92 engines flagged).
  • Legitimate e-commerce platform confirmed by independent security researchers and major antivirus vendors.
  • Ranks in global top-100k by traffic, indicating substantial user base and operational scale.
  • Some positive user reviews on Reddit reporting successful purchases and refunds over multi-year periods.
AI Recommendation
Temu is a real company, but exercise caution before purchasing. Verify seller ratings, read recent reviews for specific items, and be prepared for potential shipping delays or quality issues. Do not enter payment details if you receive unsolicited emails claiming to be from Temu or USPS — verify directly through the official app or website. Consider the documented data-privacy concerns and regulat
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for temu.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
23 yrs
Registered Apr 2003
Business registration
Active · USA (subsidiary)
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
4 scam reports · 6095 complaints · 3 positive
Key findings
7 headline facts from open-web research
  • Temu.com is the official website of the e-commerce platform launched in 2022, operated in the US by Whaleco Inc., a subsidiary of PDD Holdings.
  • BBB rating B (not accredited) with 6,095 complaints primarily about product quality, shipping delays, refunds, and customer service.
  • Trustpilot score 1.9/5 from over 52,000 reviews; frequent complaints of poor quality items, delivery failures, difficult refunds, and deceptive promotions.
  • Multiple sources (Bitdefender, Avast, Norton) state Temu itself is legitimate but attracts third-party scams such as fake emails, phishing, counterfeit goods, and fake gift card promotions.
  • FTC settlement: Whaleco/Temu paid $2M penalty in 2025 for INFORM Consumers Act violations regarding seller disclosures and reporting tools for suspicious/counterfeit listings.
  • Arizona AG lawsuit (Dec 2025) alleges unlawful data collection, privacy violations, and counterfeiting; other regulatory actions include EU fine, forced labor concerns, and data privacy class actions.
  • Wikipedia and official records confirm ownership by PDD Holdings (Cayman Islands/Dublin); domain age of ~23 years aligns with established business infrastructure.
Scam reports (4)
Direct quotes from public scam databases, forums, and news.
  • Trustpilotopen

    "Temu is rubbish, their advertising is false. I will never buy from them again"

  • Trustpilotopen

    "I had 99.99% completed for my free items only for temu to reset everything. It is nothing but a scam"

  • TIMEopen

    "Temu has already been subject to more than 30 complaints to the Better Business Bureau, and has a BBB customer rating of less than 1.5 stars"

  • Arizona AGopen

    "Attorney General Kris Mayes... filing of a lawsuit against Temu... for violations of the Arizona Consumer Fraud Act, including unlawful data collection... and counterfeiting"

Positive reviews (3)
Quotes indicating the site is legitimate.
  • Bitdefenderopen

    "Temu is not a scam; it's a legitimate e-commerce platform owned by Chinese company PDD Holdings"

  • Avastopen

    "Temu is a legitimate company owned by PDD Holdings... Temu itself is not a scam"

  • Redditopen

    "I've bought from temu for over two years and have very few complaints. I've had no problems getting refunds"

Business registration
Status: active · USA (subsidiary)

US operations via Whaleco Inc. (Delaware/Massachusetts registered subsidiary of PDD Holdings, which is Cayman Islands registered with Dublin office)

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found substantial consumer complaints and regulatory action against Temu. The Better Business Bureau lists over 6,095 complaints, primarily about product quality, shipping delays, and refund difficulties. an independent review aggregator shows a 1.9/5 rating from 52,000+ reviews with recurring complaints of deceptive promotions and poor customer service. The Arizona Attorney General filed a lawsuit in December 2025 alleging unlawful data collection, privacy violations, and counterfeiting. The FTC also secured a $2 million settlement in 2025 for violations of consumer-protection rules regarding seller disclosures and reporting tools for suspicious listings. Independent security researchers and antivirus vendors confirm that Temu is a legitimate company owned by PDD Holdings, but the platform is known to host third-party scams including phishing emails, fake gift-card promotions, and counterfeit goods.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious62Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbers0 76 118 47
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No postal address visible on the page.
  • Phone number listed (0 76 118 47).

Domain & Encryption

Domain History
Age23 years old
RegistrarMarkMonitor Inc.
RegisteredApr 29, 2003
ExpiresApr 29, 2030
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoDaddy.com, Inc. · Go Daddy Secure Certificate Authority - G2
ExpiresAug 14, 2026 (59d)
Self-signedNo
Hosting & Technology
HostingFastly, Inc.
Server locationUS
Web serverServer
PopularityTop 100k worldwide

Redirect Chain

Hops
2
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://temu.com/
  • 2301https://temu.com/
  • 3200https://www.temu.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file13
ISPFastly, Inc.
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat temu.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked temu.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • temu.com currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. temu.com presents a valid TLSv1.3 certificate issued by GoDaddy.com, Inc. · Go Daddy Secure Certificate Authority - G2, expiring in 59 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • temu.com is 23.1 years old, registered on 4/29/2003 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report temu.com as clean.
  • No. temu.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • temu.com resolves to an IP operated by Fastly, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. temu.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·temu.com
SUSPICIOUS

Temu is a legitimate e-commerce platform owned by PDD Holdings, but operates with significant regulatory and consumer-trust issues. Over 6,000 complaints on file with the Better Business Bureau, a 1.9/5 an independent review aggregator rating, and ongoing lawsuits for data collection violations and counterfeiting create substantial risk for buyers.

Temu is a real company, but exercise caution before purchasing. Verify seller ratings, read recent reviews for specific items, and be prepared for potential shipping delays or quality issues. Do not enter payment details if you receive unsolicited emails claiming to be from Temu or USPS — verify directly through the official app or website. Consider the documented data-privacy concerns and regulat

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.