This study evaluated the concentrations of heavy metals – lead (Pb), arsenic (As), cadmium (Cd), chromium (Cr), and mercury (Hg) – in 16 packaged spice samples purchased from major e-commerce platforms in Bangladesh. The goal was to assess contamination levels and potential health risks. Metal concentrations were measured using atomic absorption spectrometry (AAS). Results showed that Pb and As levels were below international safety limits (FAO/WHO), and Hg was not detected. However, Cd (up to 3.62 mg/kg) and Cr (0.53–6.79 mg/kg) were significantly high. Notably, 81.25% of the samples exceeded the FAO/WHO permissible limit for Cd (0.2 mg/kg), with some exceeding the safety threshold by up to 18 times. A health risk assessment, based on estimated daily intake (EDI), target hazard quotient (THQ), and cancer risk (CR), indicated that consuming these spices could pose serious long-term health risks, including renal dysfunction, neurotoxicity, and carcinogenicity. The THQ for Cr was well above the safe threshold (1.58–5.17), and the cancer risk for Cd (up to 3.68 × 10−3) and Cr (up to 7.75 × 10−4) surpassed acceptable limits, particularly for vulnerable groups such as children and pregnant women. The study concludes that spices sold through e-commerce in Bangladesh raise significant public health concerns, specifically kidney damage, neurotoxicity, and potential carcinogenicity due to Cd and Cr contamination, underscoring the need for stronger regulation, regular monitoring, and increased public awareness to protect food safety in the expanding digital marketplace.