The holiday season may be over, but cybercriminals aren’t done shopping for victims. Check out how you can stay protected from these scams that put your payment details and personal data at risk.

Our researchers first detected a surge in fake e-shop scams preying on bargain-hunting consumers during Black Friday and Christmas shopping sprees. However, just because the holiday season ended, doesn’t mean that shoppers are off the hook.  

According to the Gen Q4/2024 Threat Report, fake e-shops accounted for 23% of all social media scams. Those are staggering numbers. If you shopped online in the last few months, you might have been one click away from a scammer’s trap. 

The impact goes beyond losing money on a never-arriving package. These scams steal personal data, payment details, and even identities, leaving victims with empty wallets — and sometimes with long-term financial damage. 

But don’t fret! Here’s how these scams work, and more importantly, how you can help protect yourself.  

More than just a bad purchase 

Fake e-shops look like legitimate online stores, but instead of delivering your order, they deliver fraud, financial loss, and identity theft. Something to note is that most fake e-shops follow a tried-and-true formula. Here’s how they operate: 

Step 1: The too-good-to-be-true deal 

• You see an ad for an expensive item at an unbelievable price. 

• These ads often appear on Facebook, Instagram, YouTube, and even Google search results. 

• Many use AI-generated ads and fake reviews to make their sites look more convincing.  

Step 2: Fake website, real payments 

• The scam website looks professional, with stolen images, fake customer reviews, and even trust badges. 

• Victims enter their credit card information and personal details to complete the purchase. 

Step 3: Vanishing act 

• After payment, the customer never receives the product, or they get a low-quality counterfeit. 

• The scam site shuts down within weeks, leaving victims with no way to get a refund. 

Step 4: Identity theft and fraud 

• The stolen credit card details are used for unauthorized purchases or sold on the dark web. 

• Personal data — think email, phone number, and address — is used for future phishing scams or identity theft. 

Where are fake e-shops popping up? 

Scammers don’t just rely on random website traffic. They use highly targeted methods to trick victims, like: 

• Social media ads: Facebook and Instagram are hotspots for fake e-shop promotions. 

• Poisoned Google Search results: Scammers manipulate search engines to push fake stores to the top. 

How to spot and avoid the fake e-shops  

Want to keep your wallet and identity safe? Here’s how you can shop smart and stay safe: 

• Check the URL carefully. Look for misspellings, extra characters, or odd domain extensions, for example: .shop, .top, or .xyz instead of .com. 

• Verify the business. Search for reviews on trusted sites. No reviews? Red flag. 

• Look for missing info. Legit businesses list a physical address and customer service contact. No phone number? That’s another red flag. 

• Beware of unrealistic discounts. If an expensive item is extremely cheap, it may be a scam. 

• Check for HTTPS, but don’t trust it blindly. A secure padlock is necessary, but not proof of legitimacy. Crafty scammers use it too. 

• Think before you click on ads. Instead, consider visiting the retailer’s official website. 

• Use secure payment methods. Try to always pay with a credit card instead of debit. Avoid direct bank transfers, crypto, or gift cards — those are scammer favorites. 

• Invest in cybersecurity. Consider using a digital guardian, like Avast One, that can help keep your sensitive information safe and spot scams. 

All that glitters isn’t gold 

Online shopping is here to stay, but so are cybercriminals. But now you know what to look for when shopping online. Stay safe, shop smart, and keep your wallet out of the scammers’ reach.