How often do you buy something online?  A couple of times a month?  A couple of times a week?  A couple of times a day?  Everybody’s answer will be different, but collectively we do it a lot; online retail accounted for over $1 trillion of purchases in the U.S. in 2022, and a record $277.6 billion in the second quarter of 2023 alone. 

Retailers ranging from titans like Amazon and Walmart down to local small-town shops work very hard indeed to land their share of that business.  Sadly — and inevitably — so do criminals and scammers, and at any given moment they operate millions of bogus sites.  So how can you spot those Fake online Shopping sites?  Pour another cup of coffee and we’ll walk you through it. 

It’s Easy to Create an Online Presence

In the early days of the internet it took some genuine skills to set up a website, but those days are gone.  A quick search will show you that there are lots of apps and services offering websites on a prefabricated “fill in the blanks” basis, and most web hosts provide those tools as part of the service when you sign up with them. 

It’s even easier on social media.  If you were opening a “side hustle” business tomorrow from your home, you could set up your own Facebook page tonight in under an hour, with exactly zero knowledge of websites.  Once that page is set up, you just need to throw a few dollars in the direction of Facebook’s advertising department, and they’ll start advertising your page to users.  It’s no harder to promote a website, except in that case you’d give your advertising dollars to Google. 

This is a simplified overview, but the main point holds: Establishing a presence online has become a very democratized process, open to anyone with minimal skills and even the smallest budget for advertising.  That’s been a boon for legitimate entrepreneurs, but it also makes life very easy indeed for scammers. 

How Bogus Websites Steal Your Money and Information

There are multiple types of bogus websites.  Some are imposters, created to look very much like a legitimate commercial or government site that you’re familiar with, such as Amazon or Netflix.  Others don’t imitate a specific site, but instead attempt to capture the look and feel of those sites in general (whether that be a retail site, a government or bank page or even something relatively shady like a gambling or porn site). 

Next, scammers find ways to drive traffic to their site.  Often that’s through phishing texts or emails, but deceptive ads on social media or search engines like Google and Bing work just as well.  Once you arrive at the criminals’ site (or in some cases, download their app) any number of bad things can happen. 

One is that they’ll download malware onto your devices, which can capture your passwords or steal your information.  A more straightforward risk is that you’ll cheerfully enter your personal and banking/credit card information, thinking you’re making a legitimate purchase.  That’s largely why fake online shopping sites are so dangerous, and so useful to scammers and identity thieves. 

How Fake Online Shopping Sites Work

Most bogus sites share some or all of those characteristics, but shopping sites are a very specific type of bogus site with some quirks of their own.  One characteristic you can count on —  whether the website directly impersonates a major retailer like Amazon, a niche retailer like MEC or just positions itself as an anonymously general retail site — is that it will offer unusually low pricing on high-demand products. 

That might be a mass-market item like the latest gaming console, a suddenly in-demand item that’s unavailable through normal channels (remember trying to get masks and sanitizing wipes during COVID?) or something as mundane as disposable diapers or high-capacity computer drives.  Whatever the product, the advertised price will be low enough to get your attention. 

The bogus site will have any number of ways to transfer your money to its coffers, depending on the scammers’ intentions and skillset.  A few of the most common include: 

• Products that are damaged, refurbished, low-quality fakes or otherwise not as described (and therefore, not worth nearly what you paid).
• Products that never arrive at all, after you’ve paid for them (this is the most common variation)
• Hidden fees, surcharges or shipping charges that dramatically inflate the price of the (usually substandard) product.
• Charging a “restocking fee” before they’ll process a refund or return (which, of course, they subsequently don’t do).

These are all aside from the potential to infect your devices, or to steal your payment informatio .  Sites focused on identity theft might consider your faux purchase to be just the added gravy.  Either way, they get you coming and going. 

Fake Online Shopping Sites are a Big (and Year-Round) Problem

If you’re wondering how common online shopping fraud is, well … the news is pretty bad.  The FTC’s 2022 Consumer Sentinel Network Data Book recorded over 327,000 online shopping complaints, the fourth-highest category for overall complaints and second among fraud categories. 

You would expect these sites to be more prevalent during the final quarter of the year, corresponding to the holiday gift-giving season — Black Friday, Cyber Monday and Christmas itself — and they are, but that doesn’t mean you can relax during the other nine months of the year.  The Anti-Phishing Working Group (APWG) identified nearly a million fake or phishing websites during the first quarter of 2022 alone (not a big time of year for shopping!), for example. 

To be clear, only 14.6% of those were eCommerce sites, but that still translates to well over 140,000 bogus shopping sites.  The true number is almost certainly higher because the APWG only tracks the ones that use a phishing approach.  Many opt to simply buy advertising instead (or as well), and those won’t be captured in the APWG’s statistics.  However you slice it, there’s a definite risk of encountering these sites when you shop. 

Recognizing Fake Online Shopping Sites

The good news is that bogus shopping sites aren’t hard to spot, once you’re aware of the risk.  They aren’t built for permanence; scammers pull them together quickly and cheaply and then abandon them once they stop producing.  That “just good enough” approach leaves plenty of visible signs you can detect.  

Below, we break down what to look for when recognizing fake online shopping sites.

Bad images

Bogus sites don’t have direct access to the real products’ manufacturing images, so they resort to copying and pasting from legitimate sites.  That means bogus sites’ product images (and often their fake logos, if they impersonate a legitimate site) are fuzzy and low-res.

A URL that’s slightly “off”

Imposter sites obviously can’t have the same URL as the legitimate site, so they’ll usually have a URL that looks right but isn’t quite.  They might have a typo in the name, or incorporate the real company’s name into their URL in a non-standard way (“myfakesite.amazon.com.123xyz.com”), or — sneakiest of all — use a letter from a different language’s character set, which looks the same to your eye but not to the computer. 

Broken links

The scammers may have simply copied and pasted user interface elements from a legitimate site, in which case a lot of links on the site may be broken (or simply not clickable). 

Lots of missing elements

A legitimate retail website will have several pages of legalese, often starting with a pop-up about its cookie policy or privacy policy.  You should certainly expect to see a detailed document spelling out shipping policies, return and refund policies and similar details.  If those are missing or brief and vapid, it’s probably a fake site. 

Limited options for payment

Sites that plan to take your money and run will often show oddly specific payment options, from wire transfers to gift cards to cryptocurrency.  The thing those payment methods have in common is that it’s very difficult to get your money back once it’s spent.  Sites geared around capturing your personal or payment information, on the other hand, may insist on getting your credit card. 

Typos, grammar and linguistic errors

Simple, silly language errors are often a red flag.  Scammers may not be native English speakers, and it shows up in awkward or sometimes inappropriate phrasing.  Errors in actual product listings aren’t necessarily a smoking gun — you’ll see them frequently on real Amazon pages — because they come from the manufacturers, who are often not English speakers.  Language errors on the rest of the site are more of a concern. 

HTTP vs. HTTPS

In the address bar of your browser, a legitimate retail site’s URL will start with HTTPS, rather than HTTP, and will show a closed lock symbol.  The majority of fake sites now also have an HTTPS URL and will show the lock (so this isn’t as helpful as it used to be), but less-sophisticated scammers may miss that detail.  You can automatically rule those ones out. 

And, of course, the biggest red flag of all is an unrealistically low price on the product you’re looking for.  We all want to get a really good deal, but that impulse will often lead you astray. 

What to Do If You Think a Shopping Site Is Fake

If a shopping site fails those basic “eyeball” tests, the smart thing to do is just close that browser tab and walk away.  If you want to dig deeper, or if you aren’t sure, there are a few quick and easy ways to verify a site’s legitimacy. 

Use a URL/website checker

Remember those really sneaky fake URLs that use a letter from another alphabet?  The best way to check those (and other problematic elements in a URL) is through a URL verifier/website reputation service, like the ones from URLVoid and Google.  Just copy (don’t click!) the link, and paste it into the checker.  If the site is sketchy, they’ll tell you. 

Look up the site on a registry

Domain names all need to be registered and there are several lookup tools you can use, like ICANN’s registration lookup (think of it as Spokeo for websites).  If a site claims to be Amazon but was registered just a few weeks ago, that’s a really big red flag.  Similarly if the site isn’t located where you think it should be, or if the ownership data is obscured, that’s grounds for concern.  If there’s an address or phone number given, of course you can use Spokeo to verify those. 

Turn to Google

If you have a bad feeling about a particular site, do a quick Google or Bing (or whatever) search that pairs the site’s name with keywords like “scam,” “fraud,” “bogus” or “ripoff” and see what comes up.  If you get a lot of hits, that’s definitely grounds for concern. 

Go Forth and Shop! (Safely)

If a given site fails any or all of those tests, then keeping your wallet in your pocket is very definitely the smart choice.  Instead of making your purchase, report the site instead to the FBI’s Internet Crime Complaint Center (IC3) and the FTC’s Report Fraud website.  That will get the investigative wheels turning and may help protect someone less wary than yourself from falling victim to the scammers. 

As always, wariness and skepticism are your friends when it comes to avoiding scams.  Don’t click on links in emails, texts or social-media messages; instead, go to the company’s site by typing the URL directly.  If you search a company’s page on Google, scroll down through the actual search results until you find it instead of clicking on the sponsored results or advertisements at the top.  Most of all, remember the Golden Rule of scam avoidance: If it seems too good to be true, it probably is. 

Keeping those principles in mind, and using the tips we’ve given here to screen out dubious sites means you’ll be able to shop ‘til you drop (safely!), despite the vast number of scammers out there.  And that — as the credit card ads like to say — is priceless. 

Sources:

• Statista – Ecommerce As a Share of Total US Retail Sales From First Quarter 2010 to Second Quarter 2023
• US Federal Trade Commission – Consumer Sentinel Network Data Book 2022
• Anti-Phishing Working Group (APWG) – Phishing Activity Trends Report, 1st Quarter 2022
• CSO Online – Phishing Attacks Using Internationalized Domains are Hard to Block
• ICANN – Registration Data Lookup Tool
• U.S. Federal Bureau of Investigation – Internet Crime Complaint Center (IC3)
• U.S. Federal Trade Commission – Report to Help Fight Fraud!