Fake shopping websites are becoming a growing online threat, with a cybersecurity report identifying a network of more than 119,000 domains designed to look like genuine online stores.
The sites reportedly copy real brands, product images and descriptions to make them appear legitimate.
According to a report by Moneycontrol, German cybersecurity startup Nebty has identified this network as DoppelCart. The report says the network includes more than 119,000 domains imitating around 44,182 brands.
Fake Shopping Websites Copy Major Brands
The report says DoppelCart has targeted thousands of brands by creating clone shopping websites. According to Nebty CEO Benedikt Scheungraber, an average of two clone websites were identified for the targeted brands.
Some brands were reportedly targeted through more than 30 fake online shops. The brands mentioned in the report include CurrentBody, SodaStream, Velasca, Daniel Wellington, Dreame, Horze, MOVA and SPARK PAWS.
These websites can closely resemble genuine stores, using similar product photographs, descriptions and branding. This can make it difficult for shoppers to identify a fraudulent website simply by looking at its appearance.
Fake Shopping Websites Offer Heavy Discounts
Some websites identified in the reported network were offering discounts of up to 65%. Large price cuts can attract customers who are searching online for cheaper deals.
However, an unusually low price should prompt shoppers to check the website carefully before making a payment. A discount that is significantly different from prices on established shopping platforms or an official brand website can be a warning sign.
How to Check a Fake Shopping Website
Shoppers should carefully examine the website address before entering payment or personal information.
Minor spelling changes in a brand name, unusual domain names or unfamiliar words added to a company name can indicate that a website needs further verification.
For branded products, customers can reduce the risk by opening the company’s official app or manually entering a website address they already know.
They should also avoid assuming that a sponsored result appearing in Google Search or a social media advertisement is automatically genuine.
Searching for the website name along with terms such as scam or reviews can also provide additional information before making a purchase.
HTTPS Does Not Prove a Website Is Genuine
An HTTPS connection and a padlock icon indicate that a connection to the website is encrypted, but they do not by themselves prove that the website is operated by a legitimate company.
Customers should also avoid sharing banking OTPs with anyone. An OTP should only be entered through the appropriate payment or banking process and should never be disclosed to another person claiming to represent a bank or shopping website.
With fake stores designed to closely resemble genuine retailers, checking the domain name, comparing prices and using official shopping channels can help customers avoid potentially fraudulent websites.
