Two reviews. Both say "Verified." One means the platform confirmed the reviewer's email address exists. The other means an independent payment processor confirmed the reviewer actually paid for the product. They're not the same thing — but most review platforms use language that blurs the distinction.
Here's what each actually means, why the difference matters for both businesses and consumers, and how to tell which one you're looking at.
# Email-verified reviews
What it checks: The reviewer controls the email address they used to sign up.
How it works: The platform sends a confirmation email with a link. The reviewer clicks the link. Done. The platform now knows the email address belongs to that person — at least at the moment of verification.
What it doesn't check:
- Whether the reviewer ever interacted with the business
- Whether a purchase occurred
- Whether the reviewer is a real person (versus a bot or a paid reviewer with a real email)
Where you see it: Lower-friction platforms, some "verified purchase" tick-boxes that are self-attested, and platforms that don't integrate with commerce data at all.
The gap: Email verification proves the reviewer exists as an email address. It proves nothing about whether they were a customer. Anyone can create a Gmail account in 30 seconds, and email verification alone treats that account as equal to a long-time customer who spent $5,000.
# Purchase-verified reviews
What it checks: That a purchase actually occurred — but who confirms it is the critical variable.
There are two kinds of purchase verification, and they sit at completely different levels on the verification spectrum:
# Level 3: Merchant-supplied purchase verification
The review platform checks the reviewer against the merchant's own order or customer records. This is what most "Verified Buyer" badges mean — on Yotpo, Judge.me, Reviews.io, and almost every Shopify review app.
How it works:
- The platform integrates with the merchant's store (Shopify, WooCommerce, etc.)
- When a review is submitted, the platform checks: does this email match an order in the store?
- If yes → "Verified Buyer" badge
The gap: The merchant controls the data being verified against. A merchant could create a test order in their own store, write a review against it, and the platform would mark it "Verified Buyer." Most merchants don't do this — but the system doesn't prevent it. The trust root is the merchant's data, and the merchant controls that data.
# Level 4: Processor-attested purchase verification
The review platform checks the reviewer against the payment processor's independent records — not the merchant's store data.
How it works:
- The platform connects to the business's Stripe account via OAuth (read-only)
- When a new Stripe charge appears, a review invitation is sent to the customer's payment email
- At submission, the platform confirms with Stripe: does this charge exist? Is it still valid (not refunded)?
- If yes → the review is cryptographically signed with the Stripe charge metadata
- If the charge is later refunded → the review is automatically hidden
The gap: There isn't one. The merchant cannot create a Stripe charge without paying real Stripe fees (~2.9% + $0.30). They cannot control Stripe's records. They cannot prevent a refunded charge from hiding its review. The trust root is the payment processor — a neutral third party.
# The critical distinction: who attests?
| Email-verified | Merchant-supplied purchase-verified | Processor-attested purchase-verified | |
|---|---|---|---|
| What's checked | Email address exists | Email matches merchant's order records | Email matches payment processor's charge records |
| Who attests | Email provider | The merchant | Independent payment processor |
| Can a merchant fake it? | Yes (create email, write review) | Yes (create test order, write review) | No (would cost real Stripe fees + risk account) |
| Verification level | Level 1 or 2 | Level 3 | Level 4 |
This is the heart of the matter: moving from "the merchant attests" to "the processor attests" changes who you have to trust. At Level 3, you trust the business to be honest. At Level 4, you trust Stripe to accurately report payments — and Stripe's entire business model depends on accurately reporting payments.
# Why this matters for your business
If you run a business that collects reviews, the verification level you offer is a competitive signal. Consider two competitors:
- Competitor A uses a Level 3 platform. Their reviews say "Verified Buyer" — meaning the competitor's own Shopify store confirmed an order existed.
- Your business uses a Level 4 platform. Your reviews say "Verified by Stripe" — meaning Stripe independently confirmed a charge occurred.
To a consumer, both say "Verified." To a sophisticated buyer — or a journalist, or a regulator, or a prospect comparison-shopping — the difference is stark. One is self-attested by the business ecosystem. The other is attested by the payment network.
# How to tell which kind you're reading
When you see a "Verified" badge on a review, ask three questions:
- Does the platform explain what "Verified" means? If the definition is buried or vague, assume it's email-verified or self-attested.
- Who did the verifying? If the answer is "the platform" and the platform's data comes from the merchant, you're at Level 3. If the answer names an independent party (a payment processor), you're at Level 4.
- Can anyone review, or only verified purchasers? Open platforms let anyone review — the "Verified" badge is an opt-in enhancement, not a gate. Closed platforms only allow reviews from confirmed purchasers.
# The bottom line
"Verified" is a magic word in e-commerce — it increases trust, improves conversion, and signals credibility. But the word is doing too much work. It can mean "has an email address," "matched a merchant's order record," or "independently confirmed by a payment processor" — and consumers can't easily tell which.
As a business, the verification level you choose is a strategic decision about what kind of trust you want to build with your customers. Email-verified says "we made it slightly harder to spam." Purchase-verified (merchant-supplied) says "we checked our own records." Processor-attested says "an independent party verified this — and we can't fake it."
The right choice depends on your business. But if you process payments through Stripe, you have access to the strongest verification level available — and your competitors probably aren't using it yet.
Further reading:
- What Does "Verified Buyer" Actually Mean? — the verification spectrum explained for every major platform
- Transaction-Verified Reviews — why processor-attested reviews are the hardest to fake
- Stripe Verified Reviews — the definitive guide