By The KTech team · Published 15 November 2026
Fake bargain websites are built to look like real shops. They advertise extreme discounts on popular items, often through social media ads, search results or messages, and they may copy the design, logos and product photos of a brand you already know. What arrives, if anything does, can be a counterfeit, a different item, or nothing at all. In the meantime the site has your payment details or your money. The National Cyber Security Centre warns that criminals can duplicate a genuine store, including its trademarks, and use a deceptive web address that is easy to mistake for the real one.
This guide covers the warning signs, how to check a site before you pay, and why credit cards and services such as PayPal generally offer more protection than a bank transfer. It also explains what to do if you have already been caught, and why Black Friday and Christmas are a particular risk. If you would like local advice for a home or a business, our cyber security services and IT support in Kingsbridge can help, or you can start from the contact page.
How do fake bargain websites work?
A typical scam shop offers a well-known product at a price that looks hard to ignore: headphones, phones, toys, perfume, clothing or household goods, often with a countdown or a claim that stock is about to run out. The site may appear in a paid social media advert, a sponsored search result, a text, an email or a message from someone whose account has been compromised. Which? has reported brand-impersonation adverts and links that lead to unofficial shopping websites, including around Black Friday.
Some sites never send anything. Others send a cheap or counterfeit item, which can make the purchase feel real until you look closely. A further group exists mainly to collect card details, account passwords or personal information. The NCSC notes that these websites are designed to trick people into making payments or revealing bank details, passwords or other personal information.
Copycat brand sites are a particular trap because they feel familiar. Which? advice on copycat shopping websites is to stay with well-known, reputable retailers where you can, and to check an unfamiliar shop carefully before you buy.
What warning signs should I look for?
The most important sign is a price that is too good to be true. Which? says that if prices seem too good to be true, they probably are, and that scam sites use low prices to sell fake, counterfeit or non-existent items. Pushy language and countdown timers are used to stop you pausing to check.
Look at the web address with care. A genuine brand has one official site. Extra words, hyphens, unusual spellings, or a domain that only mentions the product, can be a warning. The NCSC gives the example of a deceptive address that looks like a supermarket's real domain but is not. Which? also advises checking when the domain was registered, using a service such as who.is, because a newly created website should raise alarm bells.
Other signs include a site that only accepts bank transfer; missing or vague contact details, with no real address, phone number or email, or only a form; no About us page, privacy policy or terms; poor English or outdated branding; and reviews that are missing, oddly similar, or hard to find outside the shop's own pages. Which? recommends checking reviews across more than one source and looking at the most recent comments.
- The discount is extreme compared with the same item on official or well-known sites.
- The web address is new, slightly wrong, or not the brand's official domain.
- The shop asks you to pay by bank transfer, or has no verifiable address or contact details.
- Basic pages such as About us, privacy information or terms are missing, or the reviews are thin, identical or hard to verify.
How can I check whether a shop is genuine?
Do not start from the advert. The NCSC's advice, if you are unsure about a link, is not to click it. Type the official address yourself if you know it, or search for the organisation and read the results carefully, rather than clicking the first item. That single habit avoids many copycat sites.
Give an unfamiliar shop a few minutes of checking. Open the homepage and the About us and contact pages, and see whether you can verify the address. Paste the domain into a domain-checking site to see when it was registered, and compare the price with the official brand or a retailer you already trust. If the official shop says the item is sold out, or the price is far apart, walk away.
Be especially careful with shops you meet only through a social media advert or a newly created social account, which Which? flags as a warning around Black Friday. If anything feels wrong, report the website to the NCSC and report the advert through the platform's tools and to the Advertising Standards Authority.
How should I pay if I still want to buy online?
The NCSC is direct: use a credit card for payments if you have one, because many of these purchases are protected under the Consumer Credit Act, and never pay by direct bank transfer. Debit card payments offer less protection, but you may be able to claim a refund under a voluntary scheme called chargeback. If you use PayPal, Apple Pay or Google Pay, check the provider's terms to see what cover they give.
Which? gives the same warning about bank transfers, and suggests a credit card, debit card or PayPal instead. Citizens Advice explains the two main routes if something goes wrong: a Section 75 claim on a credit card when a single item cost more than £100 and no more than £30,000 and you bought directly from the trader, and chargeback in other card cases, including many debit card payments. A PayPal dispute, where the terms allow it, generally needs to be opened within 180 days of payment.
At checkout, only fill in the details the shop actually needs. The NCSC suggests using guest checkout where you can, not letting the browser store your payment details, and not allowing an unfamiliar shop to keep your bank details for later.
What should I do if I have already paid or shared details?
Contact your bank or payment provider at once, using a number from the back of your card or from the provider's official website. Tell them you believe you have paid a scam shop, ask them to stop or recall the payment, and cancel a card if its details were entered on the site. If you created an account or reused a password, change that password and any other account that shared it, and turn on two-step verification.
If you paid by credit card, debit card or PayPal, ask clearly about Section 75, chargeback or a PayPal dispute, as Citizens Advice sets out. Keep the order confirmation, screenshots of the site and the advert, and any messages. If a counterfeit or different item arrives, do not throw it away until you have taken advice, because it may be useful evidence.
Then report it as a crime. The NCSC says that if you have been tricked into making a payment, you should tell your bank and report it to Report Fraud in England, Wales and Northern Ireland, or to Police Scotland if you are in Scotland. Report Fraud, which has replaced Action Fraud, is available online or on 0300 123 2040. In Scotland, call 101. Also report the website to the NCSC, forward a scam email to report@phishing.gov.uk, forward a scam text to 7726, and report a scam advert to the ASA as well as on the platform where you saw it.
Why are Black Friday and Christmas a particular risk?
Busy shopping periods give scammers two advantages: more people are looking for discounts, and more genuine ads make a fake one easier to miss. Which? advises extra caution with Black Friday emails and social ads, and recommends visiting a retailer's website directly rather than following a link. Classic signs it lists include unrealistically low prices, a recently created website without a privacy policy, postal address or About us page, a new social account, and payment by bank transfer only.
The same checks apply throughout the Christmas season, when parcels and sold-out gifts are on many people's minds. If a deal appears only in an advert, and you cannot find it on the official site, treat that as a reason to stop.
Good shopping habits are easier to keep if accounts use unique passwords and two-step verification, and if family or staff do not pay new websites by bank transfer. That is the kind of practical safeguard we help people put in place. Proportionate cyber security protection for businesses, organisations and households across South West England, including Kingsbridge, the South Hams, Devon and Cornwall. We identify your real security risks, implement practical safeguards and establish clear, straightforward policies that people can understand and follow.