Alibaba.com

Is Alibaba.com safe to use?

For a business that knows what it is buying, Alibaba.com is a workable way to reach manufacturers, and we found no regulator fine or order against it. The platform's own records are clean compared with its consumer sister AliExpress (44), which the European Commission fined €550 million in 2026. The real risks are elsewhere: the app's privacy label is broad for a trade tool, and the supplier on the other end of a chat is someone you have to check yourself.

We score Alibaba.com 53/100. That puts it a point below Amazon (54) and well above AliExpress and Temu (42), mainly because no regulator has acted against it.

What does the app collect?

Apple's App Store label is wider than many shopping apps. Under "data used to track you", meaning data matched with other companies' apps and websites, it lists purchases, contact info and identifiers. Linked to your identity, it adds financial info, location, your contacts, user content, search history, usage data and diagnostics.

The privacy policy, last updated on 12 August 2026, explains how that works. Alibaba.com shares data with "marketing and advertising platforms, such as Google, Twitter, Facebook and Instagram", and says those platforms may combine what they collect on Alibaba.com with data from their own services and other websites to target ads. It uses your browsing records and order history for tailored marketing, and may run credit-risk scoring for fraud prevention. Business buyers also hand over more than a consumer would: company registration details, tax information, and sometimes ID and phone bills for verification.

Where the data sits is spelled out more clearly than on most Chinese-owned apps. The policy says users in the US, UK, Canada, Australia and New Zealand have their data stored in the United States, EU, EEA and Swiss users in Germany, and everyone else in Singapore or Germany. Group companies in mainland China and Singapore get "limited remote access" for certain functions. In-app chat with suppliers runs on DingTalk, and the policy names its data controllers as Dingding Technology and DingTalk (China) Information Technology, which collect your chats and device information and pass a copy to Alibaba.com. Your contact details also go to suppliers, who may use them to market to you unless you opt out in the Buyer Privacy Settings.

Is it secure?

We found no reported breach of Alibaba.com buyer accounts. Alibaba Group runs a paid bug bounty on HackerOne whose scope includes *.alibaba.com, *.taobao.com and *.aliexpress.com; when we checked in October 2026, new submissions were paused. The policy itself says little about technical protection beyond "appropriate technical and organisational measures", and it puts the burden of account safety on your password.

For a business account that holds payment cards and bank details, that is thin. Use a unique password and any extra login protection the app offers, and do not share one login across a purchasing team.

Scams and supplier risk

Alibaba.com lists products from businesses you cannot visit easily, and the App Store rates the app 18+, citing references to weapons, drugs, alcohol and medical treatment, plus chat and user-generated content. Before you pay, plan for these risks:

• a supplier asks you to pay by bank transfer or another channel outside Alibaba.com, which takes you out of Trade Assurance
• samples are good but the production run is not
• branded goods turn out to be copies, which can also expose you to customs seizure and legal risk as an importer
• certificates (CE, FCC, food contact) are missing or not genuine

Trade Assurance, Alibaba.com's protection scheme, covers orders and payments made on the platform, so the single most useful rule is to keep money inside it. The US Trade Representative's 2025 list of notorious markets for counterfeits names Alibaba's China-facing Taobao, not Alibaba.com, but the counterfeit risk on branded goods applies on any wholesale site.

How to buy on Alibaba.com more safely

1. Pay only through Alibaba.com checkout so the order stays under Trade Assurance. Refuse requests to pay a personal or offshore account.
2. Check the supplier's years on the platform, verification badges, response rate and transaction history before asking for quotes.
3. Order samples first, and use a third-party or Alibaba.com inspection before the full production run ships.
4. Ask for test reports for anything electrical, for children or for food contact, and check them with the issuing lab.
5. In the app, unsubscribe from marketing and limit ad tracking in your phone's settings, since purchases and contact details are labelled as used for tracking.

How we scored it

Regulatory record (85) is the strongest factor: we found no fine or order naming Alibaba.com, though no large consumer regulator has examined it either, so it stays below 90. India's 2020 block of AliSuppliers, Alibaba.com's app for sellers, cited sovereignty rather than data handling and counts only as context. Privacy (38) is the weakest, because the label ties purchases and contact details to cross-company tracking and the policy shares data with ad platforms. Security (57) and scams (52) sit in the middle: no known breach, a bug bounty, and a dispute route that only works if you pay on the platform.