A few months ago, I shared a personal story about almost being duped by a fake online store while shoe shopping. (I did end up getting the shoes, thankfully!) Unfortunately, it looks like these scams are becoming more widespread as the holiday season approaches. In fact, researchers have uncovered thousands of fraudulent online storefronts targeting shoppers in the US and Europe, potentially stealing payment info from unsuspecting victims.
In October, the threat intelligence company EclecticIQ uncovered a vast network of roughly 4,700 fake online stores. These sites are part of a larger scam ring designed to steal sensitive payment information, including credit card numbers, from shoppers. This stolen data is then likely used for identity theft or other forms of fraud. The researchers traced the origins of these fraudulent stores to China, and they’ve named this operation “SilkSpecter.”
What makes these fake storefronts so convincing is the sophistication behind their creation. Many of them imitate well-known brands like The North Face, LL Bean, and IKEA, using familiar logos, product images, and even pricing schemes. Some of these fake sites capitalize on the Black Friday shopping season by incorporating related keywords, images, and URLs, making them appear even more legitimate. To collect sensitive information, these sites are utilizing the Stripe API, which is commonly used by trusted retailers for payment processing. Some of these sites also dynamically translate their content based on a user’s location, making the scam even harder to detect.
As holiday shopping ramps up, shoppers need to stay vigilant. Just because a store appears in a Google search or even within Google’s shopping tool doesn’t mean it’s legitimate. I’ve encountered fake stores even in these trusted spaces, and Google’s automated verification system leaves plenty to be desired. Be cautious about ads—especially those on social media—or links sent through email. If an offer seems too good to be true (like half-off on popular shoes, available in every size), it probably is. Always take the time to open a new browser tab and search for the verified website before making a purchase.
EclecticIQ also recommends using virtual credit cards to add an extra layer of security. These “dummy” cards, offered by many banks, allow you to assign a specific spending limit and can be discarded after a single use, preventing any fraud or unauthorized charges. As we approach the holiday shopping season, this extra measure can provide peace of mind while navigating the potentially treacherous waters of online shopping.