Holiday Shopping Scams: How to Spot Fake Deals and Phishing Ads

Online Safety October 01, 2026
Holiday Shopping Scams: How to Spot Fake Deals and Phishing Ads

December brings two things at once: genuine discounts and a lot of people hoping you won't look too closely. Fake storefronts, spoofed shopping ads and delivery-notification phishing all cluster into the same few weeks, partly because shoppers are rushed and partly because so many of us are buying from brands we've never used before. The reassuring part is that these schemes recycle the same handful of tricks. Once you know what they look like, a two-minute check before you type in a card number will save you far more than the discount was ever worth.

Scams Get Better When Your Guard Drops

Holiday shopping removes the two things that normally protect you: patience and familiarity. You're buying from a shop you've never heard of, on a phone, on a train, with a gift list in your head and a delivery deadline in front of you. A convincing fake listing looks identical to a real one at that moment.

That's why most fake-shop losses don't come from hacked accounts. They come from a card number typed into a page that was built a fortnight ago by someone who will be gone by January.

Five Things Fake Stores Reveal About Themselves

Almost every fraudulent storefront leaks clues. Run these checks before you add anything to a basket:

  • The domain. Look at the address bar, not the logo. A real brand name with an extra hyphen, a misspelling, or a cheap extension such as .shop, .top or .xyz is a warning. So is a domain that doesn't match the email address on the contact page.
  • The contact page. A legitimate retailer gives a physical address, a phone number and a support email on its own domain. A form-only contact page plus a free webmail address is a strong signal to walk away.
  • Prices that ignore retail math. Current-model electronics, designer coats and popular toys don't sell at 85% off. If the discount only exists on the page you arrived at, and the checkout price quietly changes, close the tab.
  • Reviews that arrived together. Sort reviews by date. Twenty glowing five-star reviews posted in the same week, all with similar phrasing and no photos, usually means the reviews were bought or written by the seller.
  • Copy-pasted product pages. Stolen photos with watermarks, descriptions lifted from another retailer, sizes and specifications that contradict each other. Fake shops scrape listings and rarely polish them.

How to Read a Shopping Ad Like a Skeptic

Search results: the ad above the real site

The top result for a brand name is often a sponsored ad, and nothing stops a scammer from buying that slot. Read the display URL on the ad, then hover over it on a desktop or long-press on a phone to see where you'd actually land. "brand-outlet-store.com" in the headline means nothing; the destination does.

Social ads with countdown timers

Urgency is the tool of choice here. A timer that resets when you reload the page, comments switched off, or a page with almost no posting history and a "shop now" button are all cheap to produce and effective. If the ad's comments are open, read them — complaints about missing orders tend to surface there long before anywhere else.

Emails that imitate retailers and couriers

A "your parcel is waiting" message with a link to reschedule delivery is one of the most common holiday phishing hooks. Don't click. Open a new tab, type the courier's or shop's address yourself and track the order from your own account. Check the sender's domain after the @ symbol, not the display name.

Where Payment Becomes the Trap

The moment a seller asks for payment by gift card, bank transfer, cryptocurrency or a peer-to-peer transfer app, treat the conversation as over. Those methods are close to irreversible. Cards are not perfect, but they give you a dispute process; keep the order confirmation and the shop's terms in case you need it.

Watch for a fake checkout that asks for your card details and the one-time code your bank texts you. A genuine merchant never needs that code. Neither does a genuine bank employee who calls you out of the blue about a suspicious purchase.

If the deal only works because you're paying in a way you can't reverse, it isn't a deal. It's a transfer.

Rules on refunds and chargebacks vary by country and by card issuer, so treat general guidance as a starting point. If a significant amount is involved, speak to your bank's fraud team or a consumer protection agency before assuming the money is gone or recoverable.

A Two-Minute Routine Before You Pay

  1. Type the retailer's address yourself instead of following a link from an ad, email or message.
  2. Check the domain spelling and the contact page details.
  3. Search the shop's name alongside the word "scam" and read what comes up, including forum threads.
  4. Pay with a credit card where you can, and use one card for online shopping so suspicious charges stand out.
  5. Screenshot the order, the price and the confirmation email. Keep them until the item arrives.
  6. If the offer expires in ten minutes, leave and come back in an hour. Real shops will still be there.

If You've Already Paid

Call your card issuer or bank the same day and ask them to dispute the charge; ask whether the card should be blocked and reissued. If you paid with a gift card, contact the card issuer immediately with the numbers and receipts — funds are sometimes frozen if they haven't been spent yet. Change the password on any account you created on the site, especially if you reused it elsewhere, and turn on two-factor authentication on your email.

Expect a follow-up contact. Victims of fake shops are often targeted again by someone claiming to be a "refund department" or a recovery service. Genuine recovery services don't cold-call you, and reporting the original loss to your national fraud reporting body or consumer authority is free.

Make the Season Boring for Scammers

The simplest defence is to buy from fewer places. Pick the shops you trust, save their real addresses as bookmarks, and let everything else wait until you've had a coffee and checked the domain. Set transaction alerts on your cards so an unexpected charge reaches you by text within seconds rather than on a statement in January. And if you're buying for family members who shop from social ads, a five-minute conversation about gift cards and countdown timers does more good than any amount of policing their phone.

Skipping a discount costs you nothing. A fake shop costs you the money, the gift and the hours you'll spend on the phone afterwards. When something feels rushed, overpriced in effort or too generous to be true, that feeling is data — use it.

Photo: StockSnap / Pixabay