For millions of consumers around the globe, the month of November has become a frantic haze of shopping and spending thanks to the likes of Singles’ Day, Black Friday, and Cyber Monday lining up.
Taking place on November 11, and primarily celebrated in Asia, Singles’ Day is considered the world’s biggest online shopping event. This is followed by Black Friday, the post-Thanksgiving weekend sales extravaganza that falls on November 25 this year, and Cyber Monday, on November 28.
Throw in a plethora of smaller sales that pop up randomly to mark the start of the holiday season, and it’s hard not to get caught up in the excitement of looking for the best deals. However, letting your guard down is exactly what scammers are counting on.
While significant online shopping holidays draw in the masses, they also attract a mass of fake e-commerce sites that have been specially designed to relieve you of more than what you’d save on a new TV, game console, or designer labels.
[Get more tips on staying safe online. Sign up for the ExpressVPN blog newsletter.]
What is a fake shopping website?
Scammers create fake shopping websites that look like genuine e-commerce stores but are designed to steal your hard-earned cash, passwords, or personal information.
While fraudsters create these sites in the hopes that unsuspecting victims may stumble across them online, most use phishing scams (soliciting visitors to the fake site via scam emails, texts, and social media ads) to lure them in.
Some faux e-stores are entirely unique in their design, but many mimic trusted retailers by using familiar logos, stolen images, and a URL that’s easily mistaken for the real thing. To the untrained eye, these sites usually look safe.
Most of these phony websites offer luxury items such as popular brands of clothing, jewelry, and electronics at a fraction of the usual cost. These deals usually come with the promise of free shipping and overnight delivery, making them even more appealing.
Not surprisingly, fraudulent sites flourish during the holiday season, and during super shopping sales events like the ones mentioned above, exploiting online shoppers who are on the hunt for low prices and fast delivery.
Why are fake shopping websites dangerous?
Fake websites are created by scammers with the sole purpose of tricking deal-hungry consumers into either buying products that don’t exist, sharing sensitive information (such as account passwords and financial information), or downloading dangerous malware.
While a tiny percentage of these copycat sites do sometimes deliver ordered merchandise—likely knockoffs—most want to either rob you of your money or harvest your personal information so they can commit identity theft or financial fraud.
10 easy ways to identify fake shopping sites
Make sure you don’t get duped by dodgy deals this holiday season! Look out for these signs, and learn how to spot a fake site faster than you can say ‘scam-azon’.
1. URL red flags
The fastest way to tell if a site is secure is by checking for HTTPS, with a padlock next to it, in the URL. HTTPS indicates that the site uses SSL encryption, which is superior to HTTP. With HTTPS, nobody between the website and the user can read the data.
Another telltale sign is if the site’s URL looks suspiciously similar to the official address of a genuine retailer, but is slightly off.
For example, Vivobarefoot is a well-known, globally established company that specializes in minimalist shoes known as barefoot footwear. They’re usually sold via their official website, through authorized online retailers (like Amazon), or in stores.
For customers in the U.S., the company’s legitimate URL is vivobarefoot.com/us. However, there are dozens of copycat sites pretending to be the official site by slightly altering its domain name—including the highly suspect, vivobarefootoutlet[dot]us.
Avoid spoof domains by manually typing a retailer’s URL into your browser. Also be skeptical of clicking any links you receive by email, text, or direct message, unless you’re sure it came from the company itself.
2. Dodgy domain history
The domain names of fake shopping websites have likely only been registered for a short period of time—with their inception usually leading up to popular holidays and big shopping events.
Going back to the Vivobarefoot example, a quick search of the legitimate company domain reveals it was created over 18 years ago, which makes sense considering it’s an established brand. Conversely, the alleged copycat site was only created eight months prior to our search.
There are a handful of free tools online that you can use to check the age of a website, including WHOIS. You can also capitalize on Google’s free safe browsing transparency search to check if a site is trustworthy or not. Just pop the URL into the search bar, and Google will give you an assessment of the site.
3. Pixelated images
Counterfeit sites predominantly feature stolen imagery—usually lifted off a legitimate retailer’s site or taken off of Google. As a result, most of the images featured on scam sites are low quality, and sometimes appear pixelated.
FAKE VS. REAL
4. Typos & bad grammar
Legitimate companies usually have a team of editors who oversee website copy before launching their sites. Online scammers don’t take the time, or might not have the ability, to craft compelling sales copy. While some lift a lot of the language from genuine sites, many are prone to making obvious grammar and spelling mistakes.
5. Amateur website design
Scammers no longer need engineers and designers to create e-commerce stores. Online website builders, and some online marketplaces like Shopify, allow users to design their own storefronts in just a few steps.
However, fraudsters tend to move quickly and often don’t want to take too long to build a fake website, as it could easily be identified as fraudulent and get taken down. This is why they tend to opt for simple, inexpensive website templates that come with limited features—often just enough to convince unsuspecting customers that they’re the real deal.
Next time you’re on a shopping site, go exploring. Inspect all elements on the homepage and take your time running through some of the other pages. Oversimplified, and poorly designed sites can be a dead giveaway of legitimacy, as can poorly formulated sitemaps.
FAKE VS. REAL
6. Bargain-basement prices
Shopping holidays like Black Friday and Singles’ Day are all about scoring amazing deals at heavily discounted prices. But if the cost of an item you’re shopping for is drastically lower than what you’ve seen it going for on other sites, you’re probably being scammed or the item is a counterfeit.
Instead, make sure you look up the price history of the goods you’re wanting to score in a sale. Then, check how much each item is going for on other sites running similar offers. A good rule of thumb is that if a site advertises prices that are 50% off and above, you should take the necessary steps to confirm it’s not fake.
Basically: If the deal looks too good to be true, it probably is.
FAKE VS. REAL
7. Limited contact details
When buying an item online, first confirm the online seller’s physical address, support email, and phone number in case you have any questions or concerns about your order.
Raise your suspicions if the site only has a fill-in contact form, the customer service email is a random Yahoo or Gmail account instead of a corporate one, or the contact details are non-existent.
FAKE VS. REAL
8. Complex or non-existent returns policy
To ensure they comply with the laws surrounding consumer protection rights, reputable retail brands are transparent about their return and refund policies. Scammers, on the other hand, often don’t bother putting much thought into the return policies that feature on their sites—if they choose to include one at all.
Before purchasing anything from an online retailer, make sure you read its refund policy. Is it clear and does it meet your expectations as a consumer? If a site’s return policy is in any way convoluted or sketchy, leave it immediately.
9. Questionable payment options
Legitimate brands will always give you the option of paying with traditional and secure methods—including credit and debit cards, cash on delivery, or pay later options, such as Klarna and Afterpay.
Fake shopping sites usually try to force you to pay for goods using non-reversible and non-traceable payment methods. These include bank transfers, gift cards, cryptocurrencies, or payment apps like PayPal, Cash App, or Venmo.
While debit and credit card issuers will likely protect you against fraud, it’s good practice to always keep a close eye on your bank accounts throughout the big shopping holidays to make sure that no unexpected amounts are being debited.
FAKE VS. REAL
10. Bad social media
Most legit businesses have some sort of social media presence as it serves as one of the best ways to advertise their products and services. If an online retailer doesn’t have an overt social media presence—or the social media icons displayed on their site lead nowhere—the chances of it being fake are high.
For example, when clicking on any of the social media icons at the bottom of the Vivobarefoot scam site homepage, it only gives you the option to share the site’s URL on your own social media pages.
Also, be on the lookout for online reviews left by other users about the site in question. While scammers often post fake reviews on their sites to look more legitimate, if it’s a more established scam, there could be an onslaught of negative reviews from previous victims littering Google or Trustpilot.
What to do if you’re a victim of a fake shopping site
If you suspect you’ve given your information or money to a fake shopping website, follow these steps:
- Call your bank or credit card company’s fraud departments immediately and let them know a scammer has gotten access to your accounts. Many finance companies offer fraud protection that covers certain charges made without your consent.
- If you have entered any account information during your dealings with the fake site (social media, email, banking, etc.), change your passwords and enable two-factor authentication (2FA) to regain control of your accounts.
- If you downloaded anything from the fake site or suspected phishing attempt, use antivirus software to scan your devices for malware and remote access software that scammers may have installed.
- Try to reverse the fraudulent payment by reaching out to the company that facilitated it. For example, if you bought an item from an online store via your PayPal account (and not a spoof PayPal page), PayPal Buyer Protection should cover you.
- Log a complaint with the platform if you bought an item from a fraudulent marketplace on eBay or Amazon, so that the e-commerce giants can investigate the e-seller and initiate a refund.
- File a police report if you have been scammed while shopping online. Not only will this increase the chances of the fraudsters being caught, but your bank, credit card company, or insurance company will likely request a copy of the report before paying out a claim.
- File an identity theft report with the FTC if you’re based on the U.S. This is a critical step for disputing fraudulent transactions and fixing your credit if you’re ever a victim of identity theft.
How to report a fake shopping site
If you identify a scam shopping site, you can report it to Google or Microsoft, as well as the FTC (if you’re in the U.S.) or the FBI’s Internet Crime Complaint Center (IC3). Be sure to include as many details as you can about why you believe the site is fake.
Here’s to making the internet safer for everyone!
Want to discover more about shopping safely online this Black Friday and beyond? Head here for ExpressVPN’s top tips.
Protect your online privacy and security
30-day money-back guarantee