Is SHEIN Legit and Safe to Order From? Who Runs It, Buyer Protections and the Legal Record

People searching “is SHEIN legit,” “is SHEIN safe” or “is SHEIN bad” are usually asking three different things: will my order show up, is my card safe, and is this company doing something wrong. This guide answers each from documents we could read: SHEIN’s own US pages, a state attorney general’s release, court and regulator reporting, and federal product-safety notices. Where something is an allegation, we say so.

Sources read on October 3, 2026: SHEIN US Terms of Use (effective September 3, 2026), Return Policy, Refund, Shipping Information and Payment Method pages (none shows its own last-updated date except the Terms); the New York Attorney General’s October 2022 release; CPSC recall notices; the European Commission’s press releases of May 26, 2025 and February 17, 2026; the San Francisco District Attorney’s July 2025 release; BBB profiles; the CFPB’s credit card dispute page; and press coverage cited next to each point. We could not open SHEIN’s privacy notice, any Texas court filing, the FTC’s own statements or the French regulator’s original release, and we found no final outcome in the Texas, FTC or EU matters. A lawsuit or investigation is not a finding that anyone broke the law.

Is SHEIN legit?

By the basic tests, yes. SHEIN’s US site publishes Terms of Use that name an operating company, a return policy with deadlines and fees, a refund page with processing times for every payment method, and a shipping page with delivery benchmarks. It has paid settlements to US authorities under its own corporate names and has issued federal safety recalls under them. A scam storefront does not do those things.

What “legit” does not tell you is how the company behaves when it is under pressure. For that, read the legal record section below. For the mechanics, see our guides to the SHEIN return policy, shipping times and cancelling an order.

Who runs SHEIN in the US?

Different documents name different companies, which is normal for a global retailer but worth knowing before you file a complaint.

For a US purchase, the Terms of Use are the contract. They are governed by Delaware law and send most disputes to binding arbitration with JAMS rather than court, with exceptions for small claims and intellectual property. They also include a class-action waiver and a right to opt out of arbitration by written notice, to the email address in the Terms, within 30 days after you first become subject to it. Temu’s terms have the same structure, as our Temu legit guide explains.

Is SHEIN safe to order from? Payments and your data

What SHEIN says about payment security

SHEIN’s Payment Method page lists credit and debit cards, PayPal, Venmo, Afterpay, Cash App Pay, Klarna, Affirm and Zip. It states: “SHEIN does not save your credit/debit card number or personal information entered into the payment fields when you make a payment.” The Terms add that credit cards are subject to verification and authorization by the card issuer. Neither page describes encryption standards, 3D Secure or fraud screening, so we can’t say more than that.

The 2018 breach and what New York found

The strongest evidence on SHEIN’s data security is a 2022 enforcement action. On October 12, 2022 the New York Attorney General announced that Zoetop would pay $1.9 million over a June 2018 attack. According to the release, the breach compromised about 39 million SHEIN accounts and 7 million ROMWE accounts worldwide, including more than 800,000 New York residents. The Attorney General’s findings included:

• passwords protected with an algorithm “known at the time to be insufficient”;
• credit card data stored “in plain text” in debug log files;
• no regular external vulnerability scans and no comprehensive written incident response plan; and
• public statements that only 6.42 million consumers were affected, when 39 million SHEIN credentials were compromised, and no alert to more than 32.5 million accounts worldwide.

Zoetop agreed to a security program covering password hashing, network monitoring, vulnerability scanning and timely incident notification. The breach itself dates to 2018, and the settlement to 2022. It is the only data-security enforcement action against SHEIN we could verify from a primary source.

The Texas data allegations

Texas’s February 2026 complaint, as reported by The Fashion Law, alleges SHEIN failed to disclose that consumer data “could be accessible to the Chinese government,” and asks for a restraining order on data collection and sharing during the case. SHEIN said it “strongly disagrees” with the allegations. We could not read the complaint or SHEIN’s privacy notice, so we can’t describe what data the app collects.

What buyer protections does SHEIN give you?

Two things to notice. First, the clocks differ: 45 days on the shipping page and 14 days in the Terms for carrier loss or damage. If a parcel arrives damaged, report it immediately instead of waiting. Second, SHEIN does not describe a single named “buyer protection program” on the pages we read, unlike some marketplaces, so the policies above are the whole picture. Details and edge cases are in our return policy guide.

Is SHEIN trustworthy? The legal and regulatory record

Below is every action we could verify, sorted by what has actually been decided and what has only been alleged. We have kept SHEIN’s responses where we found them.

Settled, fined or recalled

Alleged, under investigation or unresolved

• FTC investigation (disclosed July 2026). In its Hong Kong IPO filing, reported July 28, 2026, SHEIN said it is cooperating with an FTC investigation into its US operations and that the outcome, “whether in settlement or otherwise, may require us to make significant monetary payments.” Reporting says the focus and timing are unclear, and we found no FTC statement.
• Texas lawsuit (filed February 20, 2026, Collin County). As reported, Texas alleges SHEIN sold products with elevated levels of lead, PFAS, phthalates, cadmium and formaldehyde, marketed unsafe children’s items and misrepresented quality and safety. It seeks civil penalties of up to $10,000 per violation and injunctions. SHEIN says it strongly disagrees. This followed a December 2, 2025 announcement that Attorney General Paxton had opened an investigation into labor practices, product safety, deceptive marketing and data practices, where SHEIN said it was committed to cooperating. We found no ruling.
• European Commission, consumer law (May 26, 2025). The Commission and the EU consumer network told SHEIN it may have breached EU law through fake discounts, false purchase deadlines, missing or incorrect return and refund information, misleading sustainability claims and hidden contact details, and gave it one month to propose commitments. No fine was imposed in that release.
• European Commission, Digital Services Act (February 17, 2026). Formal proceedings on illegal-product controls, addictive design features such as points and rewards, and recommender-system transparency. The Commission says opening proceedings “does not prejudge the outcome.”
• France, platform suspension (December 19, 2025). The government sought a three-month suspension after illegal products were sold. A Paris court rejected it as “disproportionate,” called the sales “isolated incidents,” and ordered reliable age verification before adult products return. A criminal investigation was reported to be continuing.
• Designer copyright and RICO case. In November 2024 a federal judge refused to dismiss racketeering claims brought by independent designers, finding a reasonable inference that SHEIN defendants took part in a RICO enterprise. SHEIN called the claims without merit. In September 2025 a notice of settlement was filed in the Central District of California; we could not see the terms.

The EU and French matters concern European sales, so they don’t change your rights as a US shopper. They matter as evidence of how regulators in several countries assess the same company’s marketing and product controls.

Is SHEIN good quality?

SHEIN’s policy pages say nothing about quality standards, so you can’t verify quality from the company. The independent evidence we could read is mixed in a way that doesn’t add up to a single verdict:

• Customer reviews on the BBB: the SHEIN Los Angeles profile showed an average of 1.11 out of 5 from 899 customer reviews when we read it, with complaints about unauthorized charges, wrong orders, late shipments and refund disputes. These are self-selected complaints, not a sample of all buyers.
• Federal safety actions: two CPSC recalls of children’s sleepwear sold on SHEIN.com, totaling about 17,460 units. Neither notice reported incidents, but sleepwear flammability is a safety issue, not a matter of taste.
• Allegations about chemicals: Texas’s lawsuit alleges toxic substances in some products. That is an allegation SHEIN contests, not a test result.

What you can control is the return window. For clothing, the 30-day return policy with a free first return is the real protection, as long as the item is returnable and you keep the tags and hygiene sticker on until you decide. Don’t expect that safety net for underwear, jewelry, accessories or clearance items. For children’s sleepwear, check the CPSC recall list before buying.

Is SHEIN bad? What the record supports

The documents support a narrower statement than either “SHEIN is a scam” or “SHEIN is fine”:

1. It is a functioning retailer with named US entities, published policies and a refund schedule.
2. It has paid penalties and settled with US authorities over data security (2022) and shipping delays (2025), and with European authorities over marketing claims (2025), and it has recalled children’s products twice.
3. It faces open, unresolved matters in Texas, at the FTC and in the EU, which SHEIN is contesting or cooperating on.
4. Nothing we read shows SHEIN taking payment and never delivering. The consumer complaints we saw are mainly about shipping delays, wrong items and refunds, and the California case was about late shipping without delay notices or refunds.

If you are comparing it to another budget marketplace, read Is Temu legit? and our SHEIN vs Temu comparison, which sets the written policies side by side.

How to order from SHEIN more safely

1. Check who sells it. Marketplace items are sold by third parties, and SHEIN says it is not a party to those transactions.
2. Read the return rules on the product page before buying anything in the non-returnable categories.
3. Pay by credit card. You get the 60-day billing-error process described by the CFPB. PayPal is also accepted if you prefer not to type a card.
4. Bundle returns. The first return per order is free; a later one from the same order costs $6.99 off your refund. Our refund timing guide explains why a card refund still takes days after SHEIN approves it.
5. Keep proof: screenshots of the product page and checkout, the order number, tracking and drop-off receipts.
6. Report problems early. 14 days for carrier loss or damage in the Terms, 45 days for a missing parcel, 90 days from the order date for faulty items.
7. Be careful with children’s items. Search the CPSC recall list before buying sleepwear or toys for young children.
8. Test any unfamiliar store with our store legit checker. SHEIN itself passes the basic checks; look-alike sites may not.

What we couldn’t verify

• SHEIN’s privacy notice, which didn’t load, so we can’t describe its data collection.
• The text of the Texas complaint, any FTC statement, and the French regulator’s original release.
• Any outcome in the Texas, FTC, EU Digital Services Act or French criminal matters.
• The terms of the designer settlement.
• Current BBB numbers, which change daily.