Online shopping has a trust problem.

Consumers are surrounded by fake stores, cloned websites, fraudulent ads and businesses that can appear overnight and disappear just as quickly.

Naturally, shoppers look for reassurance.

They search for a company on Trustpilot. They check its domain on ScamAdviser. They look for reviews, trust scores and warning signs before entering their payment details.

That makes sense.

As the owner of a newly launched independent business, I want consumers to protect themselves too.

But after experiencing these trust systems from the other side — as a legitimate small business trying to establish itself — I found myself asking a very different question:

What happens when the mechanisms designed to protect consumers start treating the normal characteristics of a new business as reasons to distrust it?

Because every legitimate business has to start somewhere.

And that somewhere is usually:

Few customers.

Few reviews.

Low traffic.

A relatively new website.

Exactly the characteristics that some online trust systems can treat as risk signals.

The Trustpilot paradox: one 5-star review, but a 3.5 TrustScore

My business received its first genuine Trustpilot review.

The customer gave it:

★★★★★ — 5 stars.

There were no negative reviews.

There were no mediocre reviews.

There was simply one review from one real customer, and that customer gave the business five stars.

Yet the TrustScore displayed for the business was 3.5.

This isn't necessarily an error.

Trustpilot doesn't calculate its TrustScore as a simple arithmetic average of all reviews. Its scoring methodology incorporates other factors and is designed so that a company with very few reviews does not immediately receive the same calculated TrustScore as an established company with a large review history.

From a statistical perspective, I understand the reasoning.

From the perspective of a new business, however, it creates a fascinating problem.

The only customer who has actually reviewed my company says 5/5.

But the number a prospective customer may notice first says 3.5/5.

That difference matters.

A consumer arriving at an unfamiliar online store may not investigate the mathematics behind a TrustScore.

They see a number.

They make a judgement.

They move on.

And that raises a simple question:

Why should being new automatically create a reputational handicap?

I'm not arguing that one review should prove that a business is extraordinary.

One review obviously cannot provide the same statistical confidence as 10,000 reviews.

But those are two different questions.

“How many people have reviewed this business?”

and

“What rating did those people give it?”

are not the same thing.

A system can communicate limited sample size without making a genuine 5-star customer experience appear, at first glance, like a 3.5-star customer experience.

And every company with 10,000 reviews once had exactly one.

---

Then I checked ScamAdviser

The experience became even more interesting when I looked at my website through ScamAdviser.

ScamAdviser describes itself as a service helping consumers determine whether websites are legitimate or potentially fraudulent. According to the company, its algorithm uses more than 40 data sources, including server information, availability of contact details, domain age and external reviews.

Its own explanation of its algorithm is particularly relevant.

ScamAdviser says common reasons why a legitimate website can receive a low score include:

a recently registered domain, WHOIS privacy protection, low traffic and a lack of independent reviews.

Importantly, ScamAdviser itself acknowledges that these factors do not automatically mean a website is fraudulent.

And yet, consider what those characteristics describe.

They describe almost every new small business on Earth.

New website? Suspicious signal.

Of course my website is relatively new.

The company is new.

Every website has a birthday.

Amazon once had a new domain.

Google once had little traffic.

Every established online business began as an unknown website that almost nobody visited.

Domain age can certainly be useful as one component of fraud detection.

But when consumers are shown a cautionary assessment, how many understand that part of the reason may simply be:

“This business hasn't existed long enough yet”?

Low traffic? Another negative signal.

This one creates an even more obvious circular problem.

A new business normally has low traffic.

That's not unusual.

That's practically the definition of launching a website.

Yet ScamAdviser explicitly lists low traffic among the common factors that can contribute to a lower score.

So consider the cycle:

You're new → you have low traffic.

Low traffic → contributes to caution.

Consumers see caution → some hesitate to purchase.

Fewer purchases → fewer customers.

Fewer customers → fewer reviews and less traffic.

And the lack of traffic and reviews can then continue contributing to the very trust problem preventing the business from acquiring them.

How exactly is a new company supposed to escape that loop?

---

The WHOIS issue gets even stranger

Another issue associated with my domain was WHOIS privacy.

There is a perfectly mundane explanation.

I originally purchased the domain privately, months before deciding exactly what business I would ultimately build around it.

My business information is now publicly available on my website, and I have contacted my provider regarding the domain registration information.

But changes don't necessarily happen instantly.

ScamAdviser itself acknowledges that website owners may legitimately hide WHOIS information to avoid spam, although it also considers hidden ownership a potential risk signal. Its reports explicitly explain that WHOIS privacy can therefore result in a lower score.

Fair enough.

Except this is where the principle becomes uncomfortable.

Privacy-protected WHOIS does not establish that a business is fraudulent.

And ScamAdviser acknowledges exactly that.

So when it appears alongside other characteristics that are also perfectly normal for a startup — new domain, limited traffic, few independent reviews — we risk creating suspicion largely from the fact that a business is simply new.

---

And what about the transparency of the trust platform itself?

This is where my curiosity turned into research.

If transparency is important when evaluating small businesses, surely transparency should also matter for the organizations performing those evaluations.

So I looked at ScamAdviser's own published company information.

ScamAdviser identifies itself as a trading name of Ecommerce Operations B.V. and publishes its Dutch Chamber of Commerce and VAT information.

Good.

But then I noticed something peculiar.

At the time of writing, ScamAdviser's own official pages do not all display exactly the same unit number for its Amsterdam address.

Its About page lists:

Keurenplein 41
UNIT A6311
1069CD Amsterdam

 

Its Imprint / Legal Contact page lists:

Keurenplein 41
UNIT C2930
1069CD Amsterdam

 

Even more interestingly, different versions of its Contact page have recently displayed different unit numbers.

There may be an entirely innocent administrative explanation for this.

Companies move. Addresses change. Websites contain outdated information. Multilingual pages aren't always updated simultaneously.

And that's precisely my point.

A discrepancy does not automatically make a company suspicious.

Context matters.

Normal administrative circumstances matter.

And legitimate businesses should be allowed that context too.

---

I tried to resolve the issue

Rather than simply complaining about the assessment, I attempted to correct it.

I submitted personal and company documentation for verification.

I attempted to claim my website.

The verification email required to complete the process did not arrive.

I tried again.

Still nothing.

I also submitted a contact request.

At the time of writing, I am still waiting for the issue to be resolved.

Interestingly, ScamAdviser's Dutch contact page says the company tries to respond to enquiries within two working days.

Perhaps my case will be resolved shortly.

And if it is, I will update this article accordingly.

Because this isn't about attacking a company.

It's about examining a system.

---

The bigger problem: reputation requires reputation

This experience revealed what I think is a much broader problem with the modern digital economy.

Consumers understandably want evidence before trusting an unfamiliar company.

But new businesses cannot manufacture years of history.

They cannot manufacture thousands of genuine customers.

They cannot manufacture five years of domain age.

And they certainly shouldn't manufacture reviews.

They have to earn all of those things.

But earning them requires customers.

Which creates a paradox:

You need customers to build reputation.

But increasingly, you need reputation to get customers.

Large established businesses have already crossed that bridge.

Small businesses haven't.

If the infrastructure consumers use to determine trust systematically rewards age, traffic volume and review volume, established companies receive advantages simply because they are already established.

The newcomer starts several steps behind.

---

This isn't an argument against consumer protection

Consumer protection matters enormously.

There are countless fraudulent online stores.

Consumers should check websites before purchasing.

They should look for legitimate business details, secure payment methods, clear return policies, realistic pricing, contact information and independent customer experiences.

Trust services can be useful parts of that process.

But a trust score should never replace judgement.

“New” is not synonymous with “fraudulent.”

“Small” is not synonymous with “untrustworthy.”

“Low traffic” does not mean “scam.”

And WHOIS privacy, by itself, does not prove malicious intent.

Even ScamAdviser's own explanation acknowledges that these characteristics do not automatically mean a website is fraudulent.

Consumers deserve protection from scammers.

But legitimate entrepreneurs deserve systems sophisticated enough to distinguish lack of history from evidence of wrongdoing.

---

Every trusted company was once unknown

This is the part we seem to forget.

Every famous company once had:

0 customers.

0 reviews.

0 website traffic.

Then someone became customer number one.

Someone wrote review number one.

Someone decided to trust an unknown company before an algorithm had accumulated enough data to tell them that doing so was safe.

Without those people, new businesses could never become established businesses.

And an economy in which only companies that already possess reputation can easily acquire more reputation isn't particularly competitive.

It's self-reinforcing.

---

Maybe we're asking the wrong question

When we encounter a small unfamiliar website, we've been trained to ask:

“Can I trust this business?”

That's a reasonable question.

But perhaps occasionally we should ask another:

“How did the platform telling me whether to trust this business reach its conclusion?”

Was there evidence of fraud?

Were there customer complaints?

Were company details false?

Were payments insecure?

Was the business impersonating another company?

Or was the website simply...

new?

Small?

Low traffic?

Without hundreds of reviews yet?

Those are very different things.

Consumers deserve to know the difference.

And small businesses deserve to be judged by what they actually do — not merely by the fact that they haven't existed long enough to become big.

Because if businesses need customers to earn trust...

but need established trust before customers will buy from them...

then eventually we have to ask:

Have we built a trust system?

Or have we built a gatekeeping system?

---

Author's note: This article describes my experience as the owner of a newly launched independent business and reflects information publicly displayed at the time of writing, 11 September 2026. Trust scores, website information and company details can change. Where relevant, I will update the article if the platforms involved resolve or materially change the issues described.