Book a Demo
Platform Phishing Simulation Pricing Blog About CyberWatch AI Scan Sign in
Blog/Phishing

Online Marketplace and Shopping Account Phishing

Fake order confirmations, refund notices and account suspension emails from big shopping brands lead to stolen logins and cards. How to spot them and check orders safely.

CyberWatch AI1 October 2026 · 2 min read
A woman on a sofa shopping online with a laptop and a card

Big shopping sites and marketplaces have hundreds of millions of customers, so phishers imitate them constantly. Emails and texts about orders, refunds, payment problems and account suspensions lead to fake login and payment pages.

Common shopping lures

  • An order confirmation for an expensive item you did not buy, with a link or number to cancel.
  • "Your payment was declined. Update your card to avoid cancellation."
  • "Your account has been suspended due to unusual activity."
  • "You are owed a refund. Confirm your details."
  • Fake prize or loyalty rewards.
Illustrative example · Email
Your order #402-0000000 has been placed: Smart TV 65" - USD 1,149.00. If you did not make this purchase, cancel within 24 hours: [Cancel order] or call 1-8XX-XXX-XXXX.
Red flags: an unexpected expensive order, urgency, and a cancel link or number. Check your orders in the official app instead. See callback phishing.

How to check

  1. Open the shop's official app or type its website.
  2. Check your orders, payments and messages there.
  3. Compare the sender address with the shop's real domain. See checking the sender.

Protect your shopping accounts

  • Unique passwords and two-step verification or passkeys.
  • Remove saved cards you do not need.
  • Use card payments or protected methods rather than transfers.

Got an order or refund email? Paste it into CyberWatch AI Scan for a free check.

For more, see how to spot phishing in our complete guide, and our online shopping scams guide.

Frequently asked questions

I got an order confirmation for something I did not buy. What should I do?

Do not click or call anything in the email. Open the shop's app or website yourself and check your orders. If there is nothing there, it was phishing.

Why do scammers use big shopping brands?

Because many people have accounts with them, so a message about an order or account seems plausible.

What if I entered my card on the fake page?

Call your card issuer to block the card and dispute any charges, then change your shopping account password.

Sources

  1. Online Shopping, US Federal Trade Commission
  2. How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
  3. Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.

Book a demo Check a message free

Keep reading

All articles →
A stone wall built from many layers of rock
Phishing

Building a Phishing Defence in Layers

No single tool stops all phishing. How to combine email security, strong sign-in, payment checks and a reporting culture so one miss does not become a breach.

2 October 2026 · 2 min read
A brown envelope and a blank card
Phishing

Checking Your Email for Hidden Forwarding Rules

After a phishing attack, criminals often add rules that forward, hide or delete your email. How to find malicious forwarding and filter rules and remove them.

2 October 2026 · 2 min read
A worried person with their head in their hands at a laptop
Phishing

Entered Your Password on a Phishing Page: Next Steps

Typed your password into a fake login page? Act in the next few minutes: change the password, sign out other sessions, check recovery details and forwarding rules. A step-by-step guide.

2 October 2026 · 2 min read