Fake Online Stores: How to Spot Them and Stay Safe

Fake online stores are one of the most common scams around, and in 2026 they are slicker than ever, with professional-looking websites, social media adverts and even AI-generated images luring shoppers in. The single best defence is simple: if a deal looks too good to be true, it almost certainly is. Beyond that, a handful of quick checks will expose the vast majority of bogus shops before you part with a penny. This guide shows you exactly what to look for, how to pay safely, and what to do if you get caught out.

We help people across Manchester who have been hit by online scams, often cleaning up the malware or sorting the fallout afterwards, so here is how to avoid becoming one of them.

Why fake online stores are booming

Online shopping fraud has surged, with reports rising sharply through late 2025 and into 2026, driven by fake adverts on social media and search engines, and by scam sites that look indistinguishable from the real thing. Criminals set up a convincing storefront, advertise sought-after items, phones, designer goods, trainers, at irresistible prices, take your money, and either send nothing, send a cheap counterfeit, or simply harvest your card details.

The scale is genuinely alarming. Citizens Advice reported that online shopping was the single most common scam type, with UK consumers losing roughly 960 million pounds to scams in the year to August 2025, and the most prevalent experience was paying for products that never arrived. Security researchers at Bitdefender recorded a 416 per cent jump in fake shop scams between October and December 2025, with over half of the entire year's fake shop attacks concentrated in the Christmas shopping season. This is not a fringe problem; it is one of the most frequent crimes in the country, and the busier the shopping calendar, the busier the scammers.

The reason these scams work is that the sites look genuinely professional now. Gone are the days of obvious spelling mistakes and clip-art logos; a modern fake shop can have slick design, glowing reviews and a secure-looking checkout. Generative AI has made things worse, because criminals can now spin up a complete, polished, English-language storefront, product descriptions and photographs in minutes, then clone it dozens of times under different names. That is exactly why you cannot judge a shop by appearance alone, and why the practical checks below matter so much.

The warning signs of a fake online shop

Run through these red flags before buying from any unfamiliar site. The more that apply, the more likely it is a scam:

• Prices that are too good to be true. The classic lure. If an item is dramatically cheaper than everywhere else, be very suspicious; nobody sells the latest phone at half price. Scammers often pitch the discount at a believable but tempting level, say 30 to 50 per cent off, because an item that is 90 per cent off makes even hopeful shoppers pause.
• A dodgy web address. Check the address bar carefully for subtle misspellings or odd endings designed to mimic a well-known brand. This trick is called typosquatting, swapping a letter, adding a hyphen or word, or using an unusual ending so that something like amaz0n-deals.shop looks plausible at a glance. Look for https and a padlock, though note these only mean the connection is encrypted, not that the shop is honest.
• High-pressure tactics. Countdown timers, "only 2 left", and "offer ends in minutes" are designed to rush you into buying before you think. Genuine retailers rarely need to panic you.
• Only insecure payment options. If a site pushes you to pay by bank transfer, cryptocurrency or gift card, walk away. These are untraceable and offer no protection. A common trick is to show card and PayPal logos, then claim at checkout that those options are "temporarily down" and ask you to pay by transfer instead.
• Reused or stock images. Scammers often lift product photos from elsewhere. A reverse image search (using a tool like Google Images or TinEye) can reveal the same picture on dozens of sites.
• Reviews that feel off. A brand-new site with lots of glowing, similar-sounding reviews, or no independent reviews anywhere else, is a warning sign. Watch for reviews that all landed within a few days, repeat the same phrasing, or praise the company in general terms without mentioning a specific product.
• No real contact details. A legitimate shop has a proper address, phone number and returns policy. Vague or missing contact information, a contact form only, or a Gmail address rather than a company email, is a red flag.
• Sloppy legal pages. Scam sites often copy and paste terms, privacy and returns pages from a real retailer, so look for another company's name left in by mistake, or pages that simply do not load.

None of these alone is proof, but several together strongly suggest a fake. When in doubt, search the shop's name plus the word "scam" or "reviews" and see what others have found.

Social media adverts: the new shop window for scammers

For most people today, the fake shop does not arrive as a dodgy email. It arrives as a slick, well-targeted advert in your social media feed. Industry reporting consistently shows that the majority of online purchase scams now begin on social media, with Meta-owned platforms (Facebook, Instagram and WhatsApp) by far the biggest source, and fake shops made up a striking share of all the scam content blocked on social media in late 2025. The advert looks professional, the product looks real, and the "shop now" button takes you straight to a convincing checkout.

Social adverts are so effective because they borrow the credibility of a platform you already trust, they can be targeted at exactly the people most likely to want the item, and they often impersonate well-known brands so the logo, colours and tone all feel right. Recent campaigns have cloned household names across electronics, fashion and sportswear to sell goods that never arrive.

Protect yourself by treating any advert as a starting point, not a destination. Rather than tapping the advert, open a new tab and type the brand's real website address yourself, or search for it independently, then check whether the offer exists there. If a "closing down sale" or "liquidation" advert points to a web address that has nothing to do with the brand it claims to represent, that is a scam. Be especially wary of adverts that push you off the platform into a private WhatsApp chat or to "complete your order" by bank transfer.

How to verify a shop in five minutes

If you are unsure about a shop, a few free checks usually settle it well before you reach the payment page. None of these needs any special software:

• Search the company on Companies House. Every genuine UK limited company must be registered, and a real retailer will usually display a company registration number, often in the footer or terms and conditions. You can look up any company free at Companies House. Check that the company actually exists, how long it has been registered, and whether the address matches the site. Two cautions: Companies House does not check the accuracy of what businesses file, and a brand-new registration with no trading history is worth a second thought.
• Check the domain age. A great many scam shops are only days or weeks old. A free WHOIS lookup (search for "WHOIS" and the website address) shows when a domain was registered. A shop claiming to be an established UK retailer whose website was created last month does not add up.
• Do a reverse image search on the product and "team" photos. If the same images appear on dozens of unrelated shops, or the "founder" photo is a stock image, you have found a fake. Google Images and TinEye both do this free.
• Read independent reviews, not just the testimonials on the site itself. Search the shop's name on a review platform and on the web generally. Treat review sites with healthy caution though, because fake reviews are common; look for a believable spread of ratings and specific, detailed comments rather than a wall of identical five-star praise.
• Beware a .co.uk address alone. A web address ending in .co.uk does not prove a shop is based in or ships from the UK. Anyone, anywhere, can register one.
• Compare the price against well-known retailers. A price far below everyone else is the single biggest tell of all.

The Metropolitan Police's online shopping advice is a useful reference, and the National Cyber Security Centre's guidance on shopping online securely covers the same ground from a security angle.

The padlock myth and other false reassurances

One of the most dangerous beliefs online is that a padlock icon means a site is safe. It does not. The padlock and the "https" at the start of the address only mean the connection between your device and the website is encrypted, so nobody can snoop on the data as it travels. They say nothing at all about whether the people running the shop are honest. Security certificates are free and take minutes to obtain, so the overwhelming majority of scam shops have a padlock too. Treat it as a basic minimum, never as a seal of approval.

A few other things that feel reassuring but prove nothing on their own:

• A professional-looking design. Templates and AI make a polished shopfront trivial to produce.
• Trust badges and "verified" logos. Anyone can paste a "100% secure" or "verified seller" image onto a page. Real certification badges link back to the certifying body; fake ones do nothing when clicked.
• Lots of five-star reviews on the site itself. Reviews hosted by the shop can be invented or filtered. Independent reviews elsewhere carry far more weight.
• A familiar brand name in the text. Scammers freely use real brand names and logos. The web address, not the logo, tells you who you are really dealing with.

The comforting signals scammers know you look for are the easiest ones for them to fake. The checks that actually count, price, payment method, domain age, company registration and independent reviews, are the ones criminals find hardest to fake all at once.

Fake reviews and the law: what changed in 2025

Reviews are one of the most powerful nudges in online shopping, which is exactly why scammers and dishonest sellers manipulate them. The good news is that the UK cracked down hard in 2025. Under the Digital Markets, Competition and Consumers Act 2024, it became illegal from April 2025 to write, commission or host fake reviews, and to post paid-for or incentivised reviews without clearly disclosing them. The Competition and Markets Authority (CMA) published official guidance on fake reviews and can fine businesses that break consumer protection law up to 10 per cent of their global turnover.

What does that mean for you as a shopper? Reputable platforms and retailers now have a legal duty to take reasonable steps to stop fake reviews appearing, so the better-known review sites are cleaner than they were. But the law does not magically remove every fake, and outright scam sites operating from overseas simply ignore UK rules. So keep reading reviews critically:

• Be sceptical of a brand-new shop with hundreds of glowing reviews posted in a short window.
• Look for detail. Genuine reviews mention specific products, sizes, delivery times and the odd niggle. Fakes tend to be short, generic and relentlessly positive.
• Read the negative reviews too. A total absence of any criticism is itself suspicious.
• Check whether reviews are marked as verified purchases, and whether the reviewer has any history.

Reviews are useful evidence, but only as one input among several. Pair them with the price, payment and company checks above.

How to pay safely online

How you pay is your strongest safety net, because the right payment method can get your money back even if you are scammed. The golden rule: use a credit card or a reputable service like PayPal for online purchases, never a direct bank transfer, cryptocurrency or gift cards.

A credit card offers the most protection in the UK thanks to Section 75 of the Consumer Credit Act. According to Which?, for purchases costing over 100 pounds and up to 30,000 pounds, your card provider is jointly liable with the seller, so if the goods never arrive, are not as described, or the trader vanishes, you can claim your money back from the card company itself. You only need to have paid part of the cost on the card for the whole purchase to be covered. PayPal and similar services add a separate buyer-protection layer, provided you raise a dispute within their time limits.

By contrast, a bank transfer is like handing over cash; once it is gone, it is extremely hard to recover, which is precisely why scammers love it. The NCSC's guidance on shopping online securely says the same: never pay an unfamiliar shop by direct bank transfer. It is also wise to check out as a guest where possible, and never let an unfamiliar site store your card details.

Payment methods compared

Not all payment methods are equal when something goes wrong. Here is how the common options stack up:

Payment method	Protection if scammed	Best for	Watch out for
Credit card	Strongest. Section 75 covers purchases over 100 pounds up to 30,000 pounds; chargeback may apply below that	Anything pricey, and any shop you are slightly unsure about	Section 75 needs the card paid directly to the seller, not via a third party
PayPal (and similar)	Buyer protection scheme	Everyday online purchases	You must raise a dispute within the time limit; using "friends and family" removes protection
Debit card	Chargeback only, within 120 days. A card-scheme agreement, not a legal right	When no credit card is available	Weaker and less certain than Section 75
Bank transfer	Very little. A reimbursement scheme now covers many transfer scams, but payouts are capped and not guaranteed	Never for an unfamiliar shop	Money is very hard to recover; the scammer's favourite
Cryptocurrency or gift cards	None	Never for online shopping	Irreversible and untraceable; a near-certain sign of a scam

The takeaway is simple: a credit card for anything over 100 pounds, or PayPal and a debit card for smaller buys, with bank transfer and crypto reserved for people and businesses you already know and trust.

A few quick checks before you buy

If you are unsure about a shop, a couple of minutes of checking usually settles it:

• Search the shop's name along with "review" or "scam" to see other shoppers' experiences.
• Do a reverse image search on the product photos to see if they have been lifted from elsewhere.
• Look for independent reviews on trusted platforms, not just testimonials on the site itself.
• Check the returns and contact details are real and specific, and that there is a proper UK address if it claims to be a UK shop.
• Compare the price against well-known retailers; a price far below everyone else is the biggest tell of all.

The same instincts that protect you from scam shops also protect you from phishing emails, covered in our guide on password and sextortion email scams. If you want to harden your defences more generally, a good firewall is a sensible layer too; see our roundup of the top free firewalls for 2026.

Common mistakes shoppers make

Most people who get caught out are not careless; they are simply rushing, excited, or trusting a signal that turns out to be hollow. These are the mistakes we see most often, and how scammers rely on them:

• Trusting the padlock. As above, encryption is not honesty. Scammers count on this misunderstanding.
• Clicking the advert instead of going to the brand. Tapping straight through a social media advert hands control to the scammer. Type the address yourself.
• Letting a countdown timer make the decision. Urgency is a manufactured emotion. Anything genuinely worth buying will still be worth buying after you have run a five-minute check.
• Switching to bank transfer when asked. If a checkout suddenly insists on a transfer because cards are "down", that is the scam revealing itself. Stop.
• Reusing the same password at checkout. If a fake shop harvests your email and password, criminals will try them on your other accounts. Unique passwords and two-step verification contain the damage.
• Ignoring the gut feeling. If something feels off, it usually is. Pausing costs you nothing; pressing on can cost you a lot.

Recognising these traps in yourself is half the battle. Scammers are not really hacking computers here; they are exploiting haste and hope.

Spotting a fake in real time: a worked example

Imagine you see an Instagram advert for a well-known brand of headphones at 45 pounds, when they sell everywhere else for around 200 pounds. The advert says "warehouse clearance, 80 per cent off, today only". Here is how a careful shopper would handle it.

• Pause on the price. An 80 per cent discount on a current, in-demand product is the loudest possible alarm. Real clearances are rarely that deep on popular items.
• Read the web address. The link goes to something like brand-outlet-uk-sale.shop. The genuine brand has its own simple address. A long, keyword-stuffed domain with an unusual ending is a giveaway.
• Check the domain age. A quick WHOIS lookup shows the site was registered eleven days ago. An established "outlet" with an eleven-day-old website does not exist.
• Reverse image search the photos. The product shots are lifted straight from the real brand's site, and the same images appear on three other "outlet" shops with different names.
• Look at the checkout. Cards are shown but "currently unavailable", and you are asked to pay by bank transfer. That is the final confirmation.

Every one of those checks took under a minute, and together they leave no doubt. The discipline of running through them, rather than tapping "buy" on a thrill of excitement, is what keeps your money safe.

What to do if you have been scammed

If you think you have bought from a fake shop or handed over your card details, act quickly, as speed gives you the best chance of recovering your money:

• Contact your bank or card provider immediately. Explain what happened and ask about a refund, a Section 75 claim (for credit card purchases over 100 pounds), or a chargeback. They may be able to stop or reverse the payment. If you paid by bank transfer, tell your bank straight away, as some transfer scams are now eligible for reimbursement, though this is capped and not guaranteed.
• Report it to Report Fraud. The UK's national fraud reporting service, which replaced Action Fraud in December 2025, takes reports of online shopping fraud at reportfraud.police.uk or on 0300 123 2040. In Scotland, report to Police Scotland on 101.
• Change any reused passwords if you entered details that match other accounts, and turn on two-step verification. Then watch for follow-up phishing attempts, as scammers often target people they have already caught with "recovery" or "refund" scams.
• Save the evidence. Keep the order confirmation, emails, the web address, the advert and any messages. They help your bank, the reporting service and any review platform you alert.
• Run a security scan. If you downloaded anything or are worried the site compromised your device, our virus and malware removal service can check it over. If you fear card or login details have spread, our IT support team can help you lock things down.

Reporting genuinely helps, both your own case and the wider effort to get scam sites taken down. The data from reports is exactly what helps banks, platforms and the police spot and close down fraudulent operations faster.

Staying safe online more broadly

Spotting fake shops is one part of staying safe online, and the same habits protect you across the board: strong, unique passwords, two-step verification, and a healthy scepticism towards anything that pressures or rushes you. Our guide on working more securely covers the essentials, and if you have children shopping or gaming online, our guide on keeping kids safe online is well worth a read.

It also pays to keep good backups, so that if a scam does lead to malware or a compromised account, you do not lose precious files in the cleanup. Our guide on why backing up your data is critical explains how, and we offer a computer backup service if you would rather it was handled for you.

A little healthy caution goes a long way. The scammers rely on haste and excitement, so the simple act of pausing to run the checks above defeats the vast majority of them.

How Manchester PC can help

If you have been caught out by a fake shop, think your device may have been compromised, or just want to make sure your computer and accounts are secure, we can help. We will check your machine for malware, make sure your security and passwords are properly set up, and give you honest, practical advice on staying safe online, with no jargon.

We cover Manchester and the surrounding areas with free local collection and return. For a security check or any computer repair, get a free, no-obligation quote or call us on 0161 820 1992.