How to Spot a Fake Online Store Before You Pay This Holiday Season
The website looks lovely. So do the other 100,000.
At a glance
First step Find the store yourself. If an ad, email or chatbot sends you to a deal, open a new tab and type the brand's address yourself, or use its app.
Saves: Your money and your card details · Tools: Any web browser; ChatGPT, Claude or Gemini for a second opinion
Example result A useful answer lists the red flags it sees in what you pasted (a too-good discount, an odd web address, payment by gift card or app) and tells you which checks to run yourself.
What to do
- Find the store yourself. If an ad, email or chatbot sends you to a deal, open a new tab and type the brand's address yourself, or use its app.
- Search the name with "scam". Type the store's name and web address with "review," "complaint" or "scam." No history at all is a warning sign during the holidays.
- Read the web address slowly. Look for misspellings, extra words like "outlet" or "official," or a familiar brand on an unfamiliar ending.
- Ask a chatbot for a second opinion. Paste the address and the wording of the offer into the prompt below. It can spot common red flags; it can't prove a site is real.
- Pay by credit card, and read the bank's code. A credit card gives you dispute rights. If your bank texts a one-time code, read the whole message: it should match the store and amount you expect.
The prompt
A prompt is the instructions you give the AI. Anything in [square brackets] is a blank for you to fill in. First time? Start here
I'm thinking of buying from an online store and want a second opinion before I pay. Here is the web address: [address]. Here is how I found it: [ad, email, search, chatbot]. Here is the offer: [product, price, discount, payment options]. List any red flags you see, explain each one in plain English, and tell me exactly what to check myself before buying (reviews, how long the store has existed, contact details, return policy, payment method). Be honest that you can't confirm whether a site is real.
- Press Copy prompt.
- Open ChatGPT, Claude or Gemini.
- Paste it into the message box and fill in the [blanks].
Keep it private. Before you paste: leave out passwords, codes, and account, card, ID and policy numbers. Swap real names for "my mother" or "the company."
Don't paste your card details, passwords or order confirmations into a chatbot. The address and the offer are enough.
What to check yourself
- A chatbot can't verify a website, and it may have recommended the fake in the first place. Use it as one check among several.
- A padlock and "https" only mean the connection is encrypted. Scammers can encrypt their sites too.
- If you've already paid a fake store, call your card company right away and report it at ReportFraud.ftc.gov.
What happenedThe story behind it
In September, Fox News reported that a security company, Nebty, had linked about 119,000 web addresses to a single fake-shopping operation it calls DoppelCart. The sites pose as real businesses and can capture card details at checkout, including the one-time codes banks text you to confirm a purchase. More than 105,000 of the shops were active in the firm's latest scans. Nebty says it's the largest fake-shop cluster yet documented, while cautioning that shared technology doesn't prove one gang runs them all.
Asking a chatbot where to shop isn't a shortcut around this. In early November, NordVPN's researchers reported more than 10,000 counterfeit addresses imitating 166 fashion brands, and said some AI assistants had pointed shoppers to stores in that network, in one case listing a fake one alongside well-known retailers. NordVPN sells security software, so read its figures as a company's research, not an official count.
The FTC's advice still does most of the work: search the seller's name with "complaint" or "scam" before you buy, be wary of big brands at unusually low prices, and pay by credit card so you can dispute the charge. If a seller insists on a gift card, wire transfer, payment app or cryptocurrency, it's probably a scam.
The verdict
If the price is impossible, so is the delivery.
Sources
How sure we are: Based on published reports and official advice. We haven't tested this one ourselves. What this means