Online shopping safety

NEW YORK (CNNMoney.com) -- The online shopping season is expected to bring in almost $39 billion in sales this year. And online shopping is a great way to keep your spending in line. But when you let your fingers do the walking, you'll want to take some precautions.

You are particularly vulnerable to identity thieves when you're sending out your credit card information. To make sure your Web site is safe, look for a picture of a closed lock in the browser window. If you see a broken lock or key that means security isn't operating at that time according to the American Bar Association.

When the Web page asks for your credit card information, the web address should begin with "https" instead of "http." Other sites will have a pop up box that indicates you are entering a secure area.

Ever wonder why you get spam from marketers you never did business with? It's because sellers on the web are allowed to collect your name, address, information on what Web site pages you visit, which products you buy, and where you ship them.

The seller can also share the information with other companies or sell it to them. Result: more spam. It's a good idea to check the seller's privacy policy. This will tell you what info the seller is collecting, how it will be used - and most importantly, how you can opt out of having this info distributed. Check for the privacy policy under "legal terms" or "terms and conditions."

You'll be better off using a credit card rather than a debit card if you're making purchases online. A lot of cards have a "zero liability limit" meaning that you won't be held responsible if there's a fraudulent charge to your card. Federal law also limits the amount you would owe to $50.

Some cards even let you create an online ID for one-time purchases. Bank of America's ShopSafe card lets you create a temporary number when you make an online purchase. This number links to your real credit card - and keeps your real card safe. Discover card also lets you shop online with secure online account numbers. Call your credit card issuer and find out if it offers a protection like that.

You may receive an e-mail that looks like its from the company. It may ask you for your personal information in order to "verify" accounts or "clear up" errors that have occurred.

Remember, legitimate businesses do not ask for social security numbers or bank account numbers. You shouldn't respond to these e-mails and don't click on the links they contain.

If you want to check with the company, type the address of the Web site into your own computer or call the company about any questions. You should also consider changing your password every 3 to 4 months to make sure it hasn't fallen into the wrong hands.