🛡️ Cybersecurity

Safe Online Shopping: How to Spot a Fake Web Shop

Prices too low, newly registered domains, bank transfer only: the signs that reveal a fake online shop and the payment methods that protect you best.

Shopping online is convenient, but fake shops have become surprisingly polished: professional design, product photos copied from the original sites, glowing reviews, support chat. Their aim is one of the following: to take a payment without shipping anything, to ship counterfeit or far cheaper goods, or to collect card details for reuse. Spotting them takes a few targeted checks.

Where you come across them

People rarely reach a fake shop by searching directly for a well-known brand. More often they arrive:

  • from social media adverts with extraordinary offers on in-demand products;
  • from sponsored results in search engines;
  • from emails or messages announcing clearances, closing-down sales or exceptional discounts;
  • from links shared in groups and chats.

The signs to check

The price

A 70 or 80 per cent discount on a sought-after branded product that sells elsewhere at full price is the first warning sign. Real shops offer discounts, but rarely across the whole catalogue and rarely so steep.

The domain

Look carefully at the address. Fake sites often use:

  • the brand name with additions such as "outlet", "store", "sale" or a country name;
  • unusual extensions for that kind of shop;
  • small spelling variations compared with the official site.

You can also check how long the domain has existed with a registration lookup service: a shop claiming to have traded for years but with a domain registered a few weeks ago doesn't add up.

The padlock isn't enough

The padlock symbol and an address starting with https only mean the connection is encrypted, not that the site is honest. Getting a certificate is easy and free, fraudsters included.

Who is behind it

A serious shop states clearly who it is: company name, address, VAT or registration number, a phone number or business email address. Be wary if:

  • information about the seller is missing altogether;
  • the only contact is a form or a free webmail address;
  • the address given doesn't exist or corresponds to a completely unrelated place.

The terms of sale

Read the returns and refunds page. Text copied from other sites, with different company names left here and there, or vague conditions are clear signs.

The reviews

Reviews published on the site itself prove nothing: they're written by whoever runs the site. Search for the shop's name together with words like "scam", "reviews" or "opinions" on outside sources, and look for discussions on forums or social media.

Payment methods

If the site accepts only bank transfers, prepaid card top-ups, cryptocurrency or money transfer services, stop. These methods make getting your money back almost impossible. A frequent trick is to display credit card logos and then, at checkout, say "the card network is temporarily unavailable" and ask for a bank transfer.

The payments that protect you most

  • Credit card: in case of non-delivery or fraud, you can ask your bank to dispute the charge (chargeback), under the card network's rules.
  • Virtual or prepaid cards dedicated to online shopping: they limit your exposure, because they hold only the amount you need.
  • Payment services with buyer protection: they offer complaint procedures, provided you use the mode intended for purchases and not the one for sending money to friends.

In any case, turn on notifications for every card charge and the strong payment authentication your bank provides.

Marketplaces carry risks too

On large selling platforms the risks are different, but they exist. The main rule is to stay inside the platform: don't agree to pay outside the site, by bank transfer or through a link sent in chat, even if the seller offers a discount. Outside the platform you lose its protections.

If you've already paid

  1. Contact your bank or card issuer immediately: block the card if you entered its details on a suspicious site, and ask about disputing the charge.
  2. Keep everything: confirmation emails, screenshots of the site, the web address, payment receipts.
  3. Change your password if you created an account using a password you use elsewhere.
  4. Report it to the police, attaching the documentation you've gathered.

In short

  • Huge discounts on in-demand products are the first sign of a fake shop.
  • Check the domain, the site's age, the seller's details and the terms of sale.
  • The padlock means an encrypted connection, not an honest seller.
  • Avoid sites that accept only bank transfers, top-ups or crypto; prefer a credit card.
  • If you've already paid, contact your bank at once and keep every piece of evidence.
MM
Marco Marzaduri

Marco Marzaduri works in cybersecurity, digital forensics and web development. With degrees in computer science and psychology, he combines technical analysis with an understanding of the human factor.

Read also