Fake shop checklist: 10 signals that give a scam store away

    Fake webshops are the single most common consumer-facing fraud vector in Europe. They are also among the easiest categories to detect: most kits share the same ten tells. Run this list before you enter a card number.

    5 min readUpdated July 6, 2026

    The 10-signal checklist

    1. Prices 40-70% below every other seller for a scarce or in-demand product. Fraud pricing is designed to override doubt.
    2. Missing or fake imprint / legal notice. In the EU an operator address is mandatory. A generic Gmail contact is not an imprint.
    3. Domain registered less than 90 days ago. Legitimate shops have history: check WHOIS creation date.
    4. Suspicious TLD or spelling. -outlet, -shop-2026, .top, .icu, .vip are heavily abused. A well-known brand on a strange TLD is almost always fake.
    5. Payment options limited to card or crypto. No PayPal Buyer Protection, no Klarna, no invoice: because those methods claw back on chargeback.
    6. Stolen product photos. Reverse-image-search a hero image (Google Lens, TinEye). If it comes up on Alibaba, Amazon and a stock library, the shop resells nothing.
    7. Copy-pasted terms & conditions with another shop's name still in the text. Search a random sentence in quotes.
    8. Missing or too-perfect reviews. Trustpilot page with dozens of 5-star reviews all posted in the last week and no negatives is bot-driven.
    9. Contact-form-only support with no phone number and a burner support email. Real retailers publish direct contact.
    10. Broken checkout UX: spelling errors on the payment step, price in the wrong currency, or a redirect to an unrelated payment domain. Kits are built quickly and leak inconsistencies at the last mile.

    What to preserve if you already ordered

    • The order confirmation email in full (raw source, not screenshot).
    • The card / PayPal transaction ID and merchant string as it appears on your statement.
    • A full-page screenshot of the checkout with URL bar visible.
    • Any tracking-number email: the sending domain is often the smoking gun.

    Then file a chargeback with your card issuer within 60 days. The evidence above shortens the process from weeks to days.

    Where to report a fake shop

    File in parallel: each recipient has a different lever:

    • Blackwall: opens a takedown case with the hosting provider and, if unresponsive, the registrar. See the scam website reporting page.
    • Consumer protection agencies: Watchlist Internet (AT), Verbraucherzentrale (DE), Trading Standards (UK), FTC (US). They add the shop to consumer-facing warning lists.
    • Card scheme fraud reporting: Visa, Mastercard and Amex each accept merchant-fraud reports and can revoke acquiring.
    • The abused brand: if the shop clones a real manufacturer, their trademark team will pursue a UDRP against the domain.

    Have a URL to report right now?

    Blackwall triages the case, files with the right blocklists and opens a takedown with the hosting provider: usually within minutes.

    Report a fake shop

    Frequently asked questions

    What is the most reliable sign of a fake shop?

    A combination of new domain age, missing or fake Impressum, and bank-transfer-only payment. Any two of these three means walk away.

    I already paid: can I get my money back?

    PayPal Buyer Protection and credit card chargebacks usually recover the funds within 60 days. Bank transfers are much harder to reverse; contact your bank immediately.

    How do I report a fake shop in Germany?

    File with Watchlist Internet, the Verbraucherzentrale, and Blackwall. Blackwall additionally files a hoster takedown so the shop goes offline.

    Are fake shops on Instagram and TikTok real shops?

    The ads are real, the shops behind them often are not. Same rules apply: check the domain, payment methods and reviews before ordering.

    How fast does a fake shop get taken down?

    Hoster takedowns via Blackwall usually resolve within 24-72 hours. Payment processors (PayPal, Stripe) freeze accounts within 24 hours of a substantiated report.

    Cookie Notice

    We use cookies to ensure the functionality of our website. Necessary cookies are required for operation. Optional cookies help us improve our services. For more information, see our Privacy Policy.