Listen to the episode
TLDR
Researchers uncovered "DoppelCart," a network of nearly 119,000 copycat online shops impersonating more than 44,000 real brands. These cloned stores look professional, use HTTPS, load images from the real retailers, and offer discounts up...
How it works
Researchers uncovered "DoppelCart," a network of nearly 119,000 copycat online shops impersonating more than 44,000 real brands. These cloned stores look professional, use HTTPS, load images from the real retailers, and offer discounts up...
Red flags
- Too good to be true discounts (up to 65%) on a site reached via an ad or social link Domain is unfamiliar, slightly misspelled, or unfamiliar TLD like .shop despite a familiar brand You are asked to read back a one time bank code to "confirm" the merchant or payment
What to do
- 1Reach the brand only via its official app, saved bookmark, or a URL you already know Pay by credit card and never via wire transfer, gift cards, or crypto Read every bank verification prompt carefully: verify the exact merchant and amount before approving, and never share codes with a seller or caller
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/scams/2026/09/more-than-100000-fake-stores-are-out-to-steal-your-card-detailsFAQ
Is Over 100,000 fake online stores stealing card details how to spot and avoid them a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Too good to be true discounts (up to 65%) on a site reached via an ad or social link Domain is unfamiliar, slightly misspelled, or unfamiliar TLD like .shop despite a familiar brand You are asked to read back a one time bank code to "confirm" the merchant or payment
What should I do first?
Reach the brand only via its official app, saved bookmark, or a URL you already know Pay by credit card and never via wire transfer, gift cards, or crypto Read every bank verification prompt carefully: verify the exact merchant and amount before approving, and never share codes with a seller or caller
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.