Is Temu legit? Here’s the truth about its safety and potential scams
Safer Web 14 min read

Is Temu legit? Here’s the truth about its safety and potential scams

Published:May 31, 2026

You can hardly visit Facebook or Instagram these days without a China-based discount store offering you all kinds of bargains. Presently, the one that is most likely to pop up on your feed is Temu. But what exactly is Temu? And is Temu safe to buy from?

What is Temu, and how does it work?

Temu is a China-based online store that focuses on selling low-cost items that ship directly from China to buyers around the world by offering products at prices that non-Chinese shopping chains can’t compete with.

A screenshot of the Temu homepage.
Temu is a trademark of PDD Holdings.

Temu can keep its prices low because many products ship directly from manufacturers or third-party sellers. They advertise heavily on social media and encourage consumers to download their app for exclusive in-app deals with the addition of reward points and mini-games. Many critics have described the design of the app as being deliberately addictive because they have “gamified” shopping. This has led to an investigation by the European Commission

Temu was downloaded 363 million times in 2025 and was the sixth most popular app worldwide. It is also the most popular shopping app downloaded in 2025. 

Spot Temu scams before you click

Use Moonlock to check suspicious texts, emails, chats, or promo messages for signs of phishing and manipulation before you click. 
TRY 7 DAYS FREE

Temu is often compared to Shein because both companies use low prices, aggressive promotions, and direct-to-consumer shipping to compete with traditional retailers. Both have also faced questions about product quality, labor practices, and the safety of some items sold through their platforms.

How 2025 tariffs reshaped Temu shopping in the US

The bargains that Temu has had on offer long depended on cheap direct shipping from China and the de minimis exemption, a US trade rule that allowed many packages valued under $800 to enter the country duty-free. However, in 2025, that changed, as the Trump administration raised tariffs on many Chinese imports and moved to end the de minimis exemption. 

Here’s what changed:

  • Before 2025: Many low-value packages, those $800 or less, could enter the US duty-free under the de minimis exemption. 
  • February and March 2025: The US added new tariffs on Chinese imports, which prompted many companies to raise prices. 
  • April 2, 2025: The US announced the end of duty-free de minimis treatment for Chinese imports.
  • May 2, 2025: The change went into effect, and many Temu-style direct shipments became the subject of duties and customs requirements.
  • After May 2025: Temu began shifting more attention to locally based sellers and US warehouse inventory instead of relying only on direct factory-to-consumer shipping from China. Reuters reported that Temu said all US sales were being handled by locally based sellers as of May 2, 2025.

For Temu customers, these changes could be seen almost immediately. CNBC reported that Temu announced that it would begin adding “import charges” of around 145% to some US orders (which more than doubled the final cost of certain items) on April 25, 2025. 

Temu also began pushing more “local” products shipped from US warehouses, often marked with “no import charges.” In 2026, this means Temu is still a legitimate shopping platform, but its cheapest deals may not work the same way they once did.

While Temu is still a legitimate shopping platform, its original “almost impossibly cheap” model is under increased pressure.

Is Temu a legitimate company?

The rapid rise of this new retail giant has caused many people to wonder about its authenticity. So, is Temu a scam? Or is it legit

Temu is a legitimate company. The platform is owned by PDD Holdings, one of China’s largest e-commerce platforms. PDD Holdings was founded by Colin Huang and is listed on the Nasdaq stock exchange under the ticker symbol PDD. Its registered headquarters are in Dublin, Ireland, though much of its business remains tied to China.

Temu’s exact worth is unknown since they’re under no legal obligation to open their books. Saying that, they have now surpassed Alibaba as China’s biggest and most profitable e-commerce company.

Is Temu safe and secure for online shopping?

Temu is a legitimate shopping platform, but it requires more caution than established marketplaces like Amazon or eBay. It is owned by PDD Holdings, a Chinese company that has drawn scrutiny from US regulators over its data practices. Product quality varies widely since most items come from third-party sellers with little vetting.

The risk profile shifted further in 2025, when new US tariffs eliminated the duty-free shipping loophole that allowed Temu to ship packages directly from China. Ongoing regulatory investigations mean the platform is still under more scrutiny than most Western retailers.

So the honest answer is: your payment details and buyer protections are covered, but the bigger concerns are data collection and a business model still adjusting to a new regulatory reality.

Temu uses secure payment methods

A screenshot of the Temu checkout page.
Temu is a trademark of PDD Holdings.

Is Temu safe to use a credit card with? This question may have you hesitating to enter your payment details into Temu, but did you know that they also accept PayPal, Apple Pay, and Google Pay?

The advantage of additional payment options is that PayPal offers buyer insurance protection on all transactions. Plus, all 3 of these alternate payment methods keep their user’s payment details on their servers, not on Temu’s.

Temu has an HTTPS-encrypted website

Before buying anything from anyone, you should always confirm that the website’s URL starts with HTTPS and not HTTP.

The S at the end of HTTPS stands for “secure” and means that the website has end-to-end encryption. In other words, any data sent to Temu, and anything they send back, is completely secure and cannot be intercepted while en route by any unauthorized third party, such as a hacker.

Temu has a money-back guarantee

A screenshot of Temu's return policy.
Temu is a trademark of PDD Holdings.

Temu offers a 90-day money-back guarantee if your items don’t arrive, if they are damaged, or if you get something different than what you ordered.

The reality, though, is that many people won’t go through the effort of returning a product for a refund, especially if it means shipping it to China and waiting weeks or even months for a refund. Customers frequently complain that getting their refund is difficult and takes a long time.

Is the Temu app safe on iPhone and Android?

Temu says its app has passed Mobile Application Security Assessment (MASA) certification after an evaluation by DEKRA, and the app does not claim unlimited access to your phone by default. Permissions such as camera, photos, or location should still require user approval.

As previously mentioned, Switzerland’s National Test Institute for Cybersecurity found behavior that makes the app more difficult to review. The institute did not find solid evidence of illicit surveillance, but it still recommended using Temu’s website instead of the app as a precaution. 

For privacy, shop through a private browser when possible. If you use the app, deny any permissions it does not need.

Are there scams at Temu?

Like any big online store, whether it be Temu, Shein, Etsy, or Amazon, allegations and complaints about scams are present on the platform.

Temu text message or email scams

Text message scams associated with Temu and other online retailers often claim that something has gone wrong with an order, whether it’s a missed delivery, a refund issue, or a limited-time reward waiting in your account. The message will typically include a link that leads to a fake login page or asks for payment details. These messages are sent by scammers using Temu’s name, not Temu itself.

Screenshot of Moonlock, Moonlock Scam Detector message

Regardless of whether a Temu message feels suspicious, do not open any link sent to you in a text message. Instead, open your app or browser and check your order status from there. You can also paste the message into Moonlock’s Scam Detector to check for common signs of phishing, urgency, or manipulation before responding.

To use Scam Detector:

  1. Sign up for a free 7-day trial
  2. Open Moonlock and go to the Scam Detector.
  3. Paste the suspicious text into the message field.
  4. Click Check.
  5. Review Moonlock’s assessment before clicking, replying, or sharing information.
Screenshot of Moonlock, Moonlock Scam Detector real

In addition, Moonlock includes deep malware scans, real-time monitoring, and a built-in VPN. Take it for a test-drive to level up your cybersecurity posture.

Fake Temu social media promotions

Scammers also create fake Temu ads, giveaway posts, and influencer-style promotions on social media. These posts may lead to phishing pages that copy Temu’s branding or ask users to “verify” their account before receiving a prize. A real promotion should not require your password, card number, or one-time security code.

Receiving packages you didn’t order

This is also what’s known as a brushing scam. It starts when a seller opens an account in someone else’s name, buys their own low-value item, and ships that item to your real address. The scammer then leaves a high-rated review for the “real” purchase in order to make the product appear more legitimate.

While this is typically harmless, it could mean that your name and address are being passed through marketing databases without your clear consent. If you do receive a package you didn’t order, treat it with caution. Avoid any QR code, insert, or follow-up message associated with the package. 

Counterfeit and low-quality goods

Do you think that handbag is genuine leather? Are those sports shoes actually Nike? Temu, like Shein, has been consistently accused of allowing counterfeit items on their site.

An image of a negative TrustPilot review for Temu.

And it’s not just counterfeit goods, either. Complaints abound of low-quality goods that many customers have labeled as “junk.” Electronic goods are the worst offenders, with some particularly concerning reports of phone chargers exploding.

Fake Temu gift cards and discount codes

This is not a scam by Temu itself but by scammers hoping to capitalize on Temu’s popularity. Phishing emails and social media ads lure people in with promises of big discounts, only to steal the person’s data.

Customer service impersonators

In this social engineering scheme, scammers will contact users and claim to be from Temu customer service. They will then ask for personal information that can be used for financial gain or even to steal the victim’s identity.

What are the safety concerns with Temu?

Let’s now dive into the potential safety concerns regarding Temu. There are quite a few.

Excessive collection of user data

It’s normal for any company to want to collect information about their customers. Supermarkets do it with loyalty cards. Retailers do it when they ask you to fill out questionnaires and provide your zip code.

But some companies, like Temu, have been accused of collecting far too much data. Examples of data collection on Temu include:

  • Information about your mobile device, including your IP address, operating system, and type of browser
  • Excessive device permissions asked for by the app, including access to the camera and microphone
  • Information about your location, which Temu claims is used to “personalize your experience”
  • Security questions, the answers of which are usually private information
  • Social media scraping (if you connect to Temu through a social media account like Facebook, Temu will take user information from the social media profile)
  • Tracking across the web through cookies on your web browser to track where you go after you’ve visited the site (to be fair, though, Amazon does the same thing)

Connections to the Chinese Government

Because Temu is a Chinese company, questions have arisen regarding Temu’s relationship with the Chinese government. This issue has a tendency to get US politicians riled up, with not-so-subtle “national security” accusations tossed about.

Although there is no evidence that Temu has ever handed over any user information to the Chinese government or installed malware on its website or app at the direction of the Chinese government, it’s an issue that remains on the US government’s radar.

Negative environmental impact

Like Shein, Temu seems to operate on a policy of “sell them cheap and keep things moving fast.” This results in lower prices but also has an impact on the materials and quality of their products.

In the case of clothing, a $5 shirt is likely to be a lower-quality product made of substandard materials. A low-quality shirt is more likely than a higher-quality counterpart to end up in a landfill, raising environmental impact concerns.

Workers’ conditions

In the case of that $5 shirt listed above, production costs might only be 50 cents. It raises the question of how much of the other $4.50 actually finds its way to the employees who made the product.

Allegations have persisted about Temu’s use of forced labor, sweatshops, bad working conditions, and staggeringly low salaries. This is a concerning trend among some Chinese-based companies, and it has prompted the US Government to accuse Temu of not obeying labor laws. Temu has denied these allegations.

​​Have there been any reported cybersecurity incidents involving Temu?

As of May 2026, there has not been a confirmed Temu cybersecurity incident. However, Temu and its parent company, PDD Holdings, have faced some scrutiny. In September 2024, a hacker claimed to have stolen the personal data of 87 million Temu customers. Temu strenuously denies this.

Confirmed facts

In 2023, Google suspended Temu’s sister app, Pinduoduo, from the Play Store after malware was found in versions that had been distributed outside Google Play. Temu itself was not involved, but the connection raised concerns with consumers because both apps are owned by PDD Holdings. After this incident, CNN reported that many former Pinduoduo developers were later moved to Temu. 

In 2024, Switzerland’s National Test Institute for Cybersecurity reviewed the Temu app and found no solid evidence of illicit surveillance. At the same time, researchers did flag unusual behavior (including dynamic code loading), which can make an app harder to assess. 

In 2024, the Arkansas Attorney General sued Temu, accusing the app of collecting more user information than shoppers understood or agreed to share. Temu has denied the allegations. 

Temu has also faced US class action lawsuits. Some claims focus on its in-app browser, which can open outside web pages inside the Temu app and may give users less visibility into what is being tracked. A report from Grizzly Research accused Temu of using aggressive permissions and spyware-like behavior. Temu disputes these claims. 

Product safety concerns

Temu has also faced product safety concerns. Seoul authorities found excessive lead or phthalates in some products sold through Temu and other fast-fashion marketplaces. Toy Industries of Europe reported that 18 of 19 toys it tested from Temu presented safety risks, and Channel 4’s Dispatches reported lead and cadmium concerns in some tested products.

Temu says it is strengthening safety controls and has announced work with testing and certification providers, including Eurofins, TÜV SÜD, TÜV Rheinland, SGS, and Bureau Veritas.

Key questions about Temu

Here are other questions you may still have about the shopping platform.

Are my personal and payment details secure when ordering on Temu?

Temu uses HTTPS encryption to ensure that your personal and payment details are secure and unable to be intercepted. The checkout process is also secure — it accepts payment methods such as PayPal, Apple Pay, and Google Pay, the details of which remain on secure servers.

Does Temu track user activity while using the app or website?

Temu’s privacy policy states that they do track user activity while using the app or the website. This can mean tracking anything from past transactions to device information and location data.

What do the Temu malware allegations mean for its users?

Temu has been hit with a lawsuit by the Arkansas Attorney-General alleging that the company is stealing user information from people’s devices. The fact that Temu is Chinese-owned has brought up national security implications. Temu denies the charges.

Does Temu share user data with third-party advertisers?

Temu’s privacy policy states that they don’t share data with third-party advertisers. However, they do share information with third-party entities to provide delivery, perform customer service, and process orders.

Is Temu committed to ethical production practices?

Questions have been asked about Temu’s ethical policies regarding its workers, their rights, and their working conditions. Allegations have been made about Temu’s use of forced labor and sweatshops.

What to do if you’ve been scammed on Temu

If you feel you have been scammed on Temu, there are some steps you need to take right away.

Inform your bank and/or credit card company

Inform your bank and/or credit card company about the incident. Financial institutions can do things like monitor your account for any suspicious activity, as well as help you try to get your money back.

In extreme cases, they can block your bank account and cancel your credit card number.

Tell Temu customer service

If the scam was carried out by a scammer using the platform, tell Temu immediately.

Call the authorities

Since Temu is based in China, there is little that the authorities in other countries can do. However, filing a complaint with law enforcement (such as the FBI) or the Better Business Bureau could make a difference in the long run. Enough complaints may compel the government to investigate the matter and take official action. This could lead to tighter security demands from Temu in the future.

What sets Temu apart from Shein?

A screenshot of Temu's reviews on Trustpilot.
Temu is a trademark of PDD Holdings.

As of November 2024, Temu has a 2.6 out of 5 rating on TrustPilot compared to Shein’s 4.2 out of 5. So, at first glance, Shein appears to have a better online reputation than Temu despite the two companies facing the same types of persistent allegations.

But there are 2 other things that separate Temu and Shein. The first is that Shein focuses on fashion. Temu, on the other hand, is like Amazon — it focuses on everything.

The other difference is that Shein produces their own products. Temu, like Amazon and eBay, allows third-party traders and suppliers to sell on the site.

Best practices for the safe use of Temu

So, how do you stop your Temu experience from becoming a bad one?

Don’t give Temu any unnecessary information

Provide Temu with the information they need to process your order, and no more. There’s no reason to input your date of birth or other personal details. And if you have to provide answers to security questions, use fake answers.

Use a disposable credit card number

If you’re hesitant to use your credit card on Temu, ask your bank if they offer virtual disposable numbers. These are numbers that are designed to be used once and then shut down. Many financial institutions now offer this service.

Use a third-party payment platform

Storing your credit card number on Temu’s servers is just asking for trouble. All it takes is one data breach for your card number to be sold on the dark web.

But if you use PayPal or a closed payment system like Apple Pay or Google Pay, your details are kept with them.

Use a VPN

Screenshot of Moonlock, a Mac security app: the VPN screen.

Even though Temu has an HTTPS security certificate, you can be doubly sure of your digital security by using a virtual private network like Moonlock’s VPN. When you use a VPN, your information goes through an encrypted tunnel to the server.

Don’t download the app

As we’ve repeatedly pointed out, the Temu app is problematic due to its demand for excessive user permissions and scooping up device information.

Instead, it’s better to visit the site in a browser, ideally while using private browsing or incognito mode.

So, how safe is Temu? Overall, while there is cause for concern regarding certain aspects of the platform’s security, most of the issues we outlined above are true of other online retailers, as well.

The truth is that there’s always some degree of risk when buying from e-commerce stores, especially China-based companies like Shein and Temu. If you really want that $5 silk bathrobe, use some common sense. Be aware of the risks, and follow the cybersecurity practices we’ve listed here.

This is an independent publication, and it has not been authorized, sponsored, or otherwise approved by PDD Holdings. Temu is a trademark of PDD Holdings.

MoonLock Banner
Ray Fernandez

Ray Fernandez

Ray has been covering tech and cybersecurity for over 15 years. His work has appeared on TechRepublic, VentureBeat, Forbes, Entrepreneur, and the Microsoft Blog, among others.