How to Recognize Fake Websites and Online Shopping Scams

Fake online stores have become hard to spot. They use polished templates, copied product photos, working checkout pages, fake reviews, countdown timers, and paid ads on social media and search engines. A padlock in the address bar proves nothing — scam sites use encryption too.

The scale is large and growing. In 2025 the FTC logged more than 419,000 reports about online shopping fraud, the second most reported fraud category after imposter scams, with $446 million in reported losses and a median loss of $117 per case. The FBI’s 2024 Internet Crime Report put total reported internet-crime losses at $16.6 billion. And in late October 2026, the Better Business Bureau warned holiday shoppers about a new trick: a fake store that shows a “card declined” message at checkout, then asks for a second card — collecting both numbers, since no real payment was ever attempted.

No single check proves a store is fake, and no single check proves it is real. The method that works is a short inspection routine: several weak signals together are highly predictive. Run it before you enter payment details, not after.

The 2-minute triage

If you only have two minutes, do these three things:

1. Type the retailer’s address yourself. Do not trust ad links, social media links, or sponsored search results. A fake store often differs from the real one by a single letter, an extra word, or an unfamiliar ending such as .shop or .top.
2. Check the seller’s identity. A real store shows a legal company name, a physical address, and a working support channel — and those details match across the website, its emails, and its social pages.
3. Check how you would pay. If the store pushes wire transfers, gift cards, cryptocurrency, or payment apps sent to a private account, walk away. Card payments and PayPal give you a dispute path; irreversible methods give you none.

If a store fails any of these three, stop. The routine below explains each check in more depth.

Step 1: Check the domain, not the design

Design tells you nothing. Shop templates cost a few dollars, product photos are copied from the brand’s own catalogue, and free security certificates are issued in minutes to anyone who owns a domain — scam shops included. HTTPS only means the connection is encrypted; it does not prove the seller is legitimate.

The domain record is harder to fake. Run the address through ICANN Lookup and look at two fields: the creation date and the registrant country. A store claiming years of trading that was registered last week deserves skepticism, especially combined with extreme discounts. Watch for lookalike tricks: an extra letter, a swapped letter, a hyphen, a misleading subdomain (brandname.real-store.com is not the same as real-store.com), or a brand name with “official,” “sale,” “outlet,” or “clearance” added to it.

You can also paste the URL into a reputation checker such as ScamAdviser, which scores sites against dozens of data sources, or check it against Google Safe Browsing. A low score means stop and investigate; a high score is a positive sign but should not replace your own review when the store is unfamiliar.

Step 2: Find the company behind the shop

Somewhere on a real store — usually in the footer, the terms page, or the returns page — you will find a legal name, a registered address, and a company number. Then test those details: search the address, check whether the phone number appears anywhere else, and see whether the company exists in a business register.

Warning signs at this step include no company name at all, an address that turns out to be a parking lot or a mail-forwarding service, a phone number that never answers, and contact details that differ between the website and its social media pages. A missing address does not prove fraud by itself, but it weakens trust — and combined with other signals, it is decisive.

Step 3: Price-check against the market

Every fake shop uses the same visual trick: a crossed-out high price next to a low one. The crossed-out number is invented, so the discount is meaningless. What matters is the real price of that product elsewhere, today.

A legitimate discount on current-season branded stock is rarely more than 20 to 40 percent, and deep clearance happens on old models, not on the item that launched last month. A new phone, a current games console, or this season’s trainers at 60 to 90 percent off is not a deal — it is bait. A site-wide 70 or 80 percent discount on every product, combined with a new domain and weak contact details, tells the same story.

Step 4: Look at how they want to be paid

This is the check that matters most once you have decided to buy, because it decides whether you have any recourse. Card payments and PayPal give you a dispute path: if the goods never arrive, your card issuer can reverse the charge. Bank transfers, cryptocurrency, gift-card codes, and peer-to-peer apps sent to a private account give you nothing. The FTC warns that anyone who demands payment by gift card is a scammer, and the same caution applies to crypto and wire transfers when a seller refuses safer options.

Watch for these checkout tricks:

• The card option “fails” and the shop suggests a transfer instead. Walk away. That failure is scripted.
• A “card declined” message followed by a request for another card. This is the trap the BBB warned about in October 2026: the first card number is already captured, and the second one is a bonus. Do not enter another card. Check your card’s app or call the number on the back of the card to see whether a charge really failed.
• A payment page on a different domain with no name you recognize. Real processors (Stripe, PayPal, Adyen, Klarna) are names you can verify.

Step 5: Read the returns and shipping policy

Fake stores usually have vague, copy-pasted, or contradictory policies — because honoring returns was never part of the plan. Look for a clear return window, who pays return shipping, a delivery timeframe that makes sense, and terms that match what the product pages promise. If the policy reads like generic filler, or the store’s “about us” page is a paragraph of vague claims, treat that as a signal, not a detail.

Step 6: Search for reviews the shop does not control

Reviews on the store’s own site are worthless as evidence — the seller controls them. Search the store’s name with words like “scam,” “reviews,” or “complaints,” and check independent sources such as the BBB’s Scam Tracker. Perfect reviews with repeated wording are suspicious; a real store has a mix, including complaints, and you can see how it responded to them.

Also check the store’s social media presence. A page created weeks ago, with generic posts and comments disabled, is not the same as an established business. Be wary of stores you only discovered through a social media ad: that is how most fake shops find their victims, and the ad itself may be impersonating a familiar retailer.

Step 7: Watch for pressure tactics

Fake timers, “only 3 left” warnings, account-lock alerts, prize deadlines, and pop-ups demanding an immediate decision are designed to stop you from verifying. A real store does not need you to buy in the next ninety seconds. If you feel rushed, close the tab and come back later — a genuine deal will still be there, and a scam will have lost its best weapon.

The same rule applies to emails and messages. A delivery notice, bank alert, or “account problem” message that pushes you to a store or a payment page is phishing, not shopping. Our guide to spotting phishing emails covers the twelve warning signs to check before acting on any message.

What to do if you already paid a fake store

Act quickly — the first hours matter most.

1. Contact your bank or card issuer immediately and report the transaction as fraud. Ask about a chargeback. If you paid by credit card, your dispute rights are strongest; if you paid by debit card, report it the same way and ask what recovery is possible.
2. If you paid by gift card, wire transfer, or crypto, contact the company that issued the payment method anyway and report it — recovery is unlikely, but reports help investigators and sometimes freeze funds.
3. Change the password on any account where you reused the password you entered on the fake site, and check whether your email appeared in a data breach — our breach-check guide shows how, in about a minute.
4. Watch for follow-up scams. Fake stores often sell the details they collected. Expect phishing emails and calls that reference your “order” and ask for more information or another payment.
5. Report the store to the FTC at ReportFraud.ftc.gov and to the BBB Scam Tracker. Reports from victims are how these operations get shut down.

The pre-payment inspection, in one list

• Domain: typed yourself, matches the real brand, not newly registered with lookalike tricks
• Seller: real company name, verifiable address, working support channel
• Price: within a believable range of other sellers, not 60–90% off everything
• Payment: card or PayPal, never gift cards, crypto, or wire transfer to a private account
• Policies: clear returns, shipping, and contact terms
• Reputation: independent reviews and a clean reputation-check result
• Pressure: no countdown timers or “card declined, try another” tricks

A shop that fails two of those seven checks is not worth the discount. The ten minutes you spend checking are cheaper than the weeks spent disputing a charge and replacing a card.