How to spot a fake retail website before you buy

I got a question this week from Janet in Idaho. She was scrolling Instagram, clicked an ad for a super-cute dress and bought it. Next thing you know, there are bogus charges on her debit card. “How the heck did that happen?” she asked me. “It was a website I’ve shopped on before.”

Oh, Janet, don’t be a Mrs. Potato Head. Only use a credit card to shop online. They have fraud protections that debit cards don’t. And be on the lookout for scammers’ newest trick: Fake websites.

It starts with clicking an ad

This latest nefarious trick works because it’s copying websites you trust. The URL looks fine, the logos and slogans are there, the product pages look normal, and the payment platforms shown are all legit. Some of the sites even have the trusted HTTPS certification and 100% fake reviews.

So, how do you end up there in the first place? The jerk behind the site takes out social media ads and sends emails. You’re then lured by the extra-low prices, special discounts and free shipping.

Spoiler: You aren’t getting that product you ordered, or it’ll be a cheap knockoff. Worse, you may end up with a malware download that steals even more of your personal information.

Spot fake sites, fast

Here’s my quick cheat sheet to check before making a single click. For starters, if the price of whatever you’re buying is less than half of what it normally would be, move on, and ask yourself these questions:

  • Is the URL multiple words? Big brands have enough clout to get simple domain names, like Macys.com or BestBuy.com. Fraudulent sites use longer, weirder titles like “MacyOutletShop.”
  • Does this trendy boutique even exist? Many scam sites use names that sort of sound real, like “Homitage.” But if you’ve never heard of it, Google it. You should at least come up with reviews, additional landing pages or third-party sites selling the brand.
  • Are there pushy pop-ups? Some websites have pop-ups for chats or discounts. But phony sites push pop-ups to ask for your contact or payment information while you’re still shopping.
  • Where’s the customer service? Counterfeit sites may have a “Contact Us” email form that goes nowhere, but real sites will have plenty of ways to contact their customer service team.
  • How do images look up close? Reliable sites use high-res images that are easy to expand or open in another window. Bogus sites typically use low-quality pics that don’t stand up under scrutiny.

Pro tip: Check the IP 

Use this IP address tool to see where the site is located. Look for suspicious signs, like an American business with an IP address from overseas, including spots like China, India, Venezuela and other places that just don’t make sense.

Janet in Idaho, this one’s for you … The other day, I was in Safeway getting ingredients for potato leek soup. Two women were engaged in deep conversation about a friend’s divorce right in front of the leeks. So I said, “Excuse me, ladies, I need to take a leek.” It took them a few seconds to laugh.

Continue reading

The cartel’s latest target? Your retirement

What do Mexican gangs, murder and retirees have in common? They’re all part of one massive vishing operation. That’s right, Mexican drug cartels are targeting older people with timeshares — and walking away with millions. 

Continue reading

‘It is not real': Title company owner warns of new twist to title fraud

A quick-thinking title company owner was able to stop a fraudulent sale when it appeared the scammer was using AI to try to steal properties.

ICYMI: Top sellers of 2024, so far

This is a list of my newsletter readers’ most-loved products. If you didn’t pick ’em up, what are you waiting for?

  • MiracleWipes (13% off, $12.97) get your electronics squeaky clean without streaks or fuzzies.
  • USB data blockers (under $10 for a 4-pack!) let you safely charge your devices while traveling or in public.
  • The Pink Stuff is a miracle cleaning paste you can use on just about anything.
  • Wall charger, surge protector and extender with five outlets and four USB ports.
  • Uniball pens (33% off a 4-pack) that won’t let anyone erase what you wrote on a check, helping to prevent check fraud.

We may receive a commission when you buy through our links, but our reporting and recommendations are always independent and objective.

Synthetic identity fraud: That’s when scammers steal a kid’s Social Security number and add bogus names, birth dates and email addresses to create fake personas. They open credit cards, max them out and leave a trail of debt. Have a kid age 13 or younger? Fill out this form to see if they have a credit report. Freeze it if they do.

AI will watch everything you do

Open/download audio

Are you behaving badly? Oracle co-founder Larry Ellison predicts that AI will soon keep you in line. In other news: MoviePass fraud exposed, Snapchat uses your face for ads, and the story behind the viral ‘Hawk Tuah’ girl.

Social Security recipients get a 2.5% raise in January: Scammers are on it. The increase will show up automatically in your bank account or as a check in the mail, no action needed. If anyone contacts you asking for “extra steps” to get your raise, it’s a scam. Report any suspected fraud.

$350,000 stolen

By a five-person scam ring pretending to be Brad Pitt. Authorities in Spain say the group faces fraud and money laundering charges after conning two women. One sent nearly $200,000! PSA: The real Brad Pitt isn’t on social media.

Confidently conned: 1 in 4 Americans still fall for scams

This number blew me away: Nearly 90% of American adults are confident they can detect and prevent a scam. And yet, 27% say they’ve been a victim at some point. The numbers don’t add up.

That’s why I’m here for you. Let’s dive into some of the most common things that trip up even the tech-savviest among us and kick scammers to the curb.

Continue reading

I can bearly believe this story. Four dopes used a bear suit and fake claws to ruin a Rolls-Royce and claim the insurance money.

Warn your older adults: An 83-year-old woman was conned out of $1.4 million by scammers posing as JPMorgan’s fraud department and U.S. agents. They said she needed to help catch a rogue employee, but she was the real target. It took 279 days after her first big withdrawal for anyone to notify her son about the suspicious activity (paywall link). Don’t count on banks to step in and help you not get taken.

New Amazon scam spreading: In triangulation fraud, a scammer lists a product at a crazy-low price, gets payment from an unsuspecting buyer and then uses a stolen credit card to buy the product from a real retailer. The scammer ships the product off to the buyer, the fraudulent charge is reversed, and the jerk is long gone with the money. Incredibly low prices are always a red flag.

💳 Don’t fall for it: Scammers pretending to be bank employees are phoning and texting with fake account fraud warnings. They’ll tell you to cut up your credit cards, leaving the chip inside intact. They then send someone to pick it up. With just that chip, they duplicate your card. A friend of mine started chanting in Latin the last time a scammer called. The man screamed, “No, don’t put a curse on my family!”

Don't fall for political donation fraud

Open/download audio

As election day approaches, scammers are coming up with new ways to steal your money. Here’s what you need to watch out for.

Lipstick on a pig: The feds now consider buy now, pay later (BNPL) apps a type of credit card. Uh, ya think? Now, buyers will get the same refund and fraud protections they do with plastic while they’re putting off those payments. BNPL companies say they’re a totally different model. Nope.

Is Tesla committing securities fraud?

Open/download audio

Federal prosecutors are investigating Tesla for possibly misleading customers and investors about its self-driving technology.

25 years is Sam Bankman-Fried’s prison sentence

In his ruling on SBF’s $14 billion crypto fraud, the judge cited the former FTX CEO’s “exceptional flexibility with the truth” and “his apparent lack of any remorse.” I expect we’ll hear about his jailhouse scams in a few years.

Part of a data breach? Add a fraud alert to your credit report. This flags you as a potential victim of fraud to anyone processing a credit application. Timesaver: You only need to contact one of the three credit bureaus.

Massive fraud campaign: Over 8,000 domains, including big names like MSN and eBay, fell victim to a spam scheme. “SubdoMailing” sends millions of deceptive emails daily, bypassing spam filters, duping folks into clicking and then raking in ad bucks. FYI: Domain owners, use this “checker” to make sure you’re safe. Everyone else, double-check any email that asks for money or account updates.

Auctions were his bid-ness: Evan James Coker in Oklahoma turned a government auction site into his personal bargain bin. He bid thousands like a high roller, then hacked the prices down to a dollar at checkout. The feds weren’t amused, and now he’s guilty of wire fraud for his $150,000 web heist.