Every figure below names its source and date. Reported cases undercount real harm, because many people never report. The numbers can also fall: Singapore recorded scam losses down 17.9% in the first half of 2026 (Singapore Police Force, Mid-Year Scam and Cybercrime Brief 2026).
Fake shops and copycat brands
Copied logos and photos, lookalike web addresses, deep discounts and countdown timers, ending at a checkout that takes the money or the card details.
The figureIn 2025 the security company Netcraft counted about 54 new Black Friday fake-shop addresses a day in mid-October and about 306 a day from 3 to 6 November (Netcraft, 24 November 2025; Netcraft sells security services). In the United Kingdom, some £11.8 million was lost to online shopping fraud from 1 November 2024 to 31 January 2025 (National Cyber Security Centre, 17 November 2025).
The checkType the shop’s address yourself and compare it letter by letter with the brand’s real one. Look for a physical address, a returns policy and a company name. Check how recently the address was registered. Stop if the only ways to pay are bank transfer, cryptocurrency or gift card.
Shop check →
Deals and adverts on social media
Adverts for deals that lead to fake shops, and friends’ accounts taken over to post “fire sales”.
The figurePeople in the United States reported US$2.1 billion lost in 2025 to scams that started on social media; more than 40% of those who lost money had ordered from an advert (Federal Trade Commission, 27 April 2026).
The checkOpen the link in your phone’s own browser to see the full web address, then check the shop. If a friend’s account is selling something, contact your friend by phone or text first.
Shop check →
Delivery and toll texts
A parcel is “held” for a small fee, or a toll is “unpaid”, with a link to a copy of the company’s website.
The figureFake package delivery texts were the most reported text scam of 2024 in the United States, a year in which people reported US$470 million lost to text scams overall (Federal Trade Commission, 14 April 2025).
The checkTrack parcels only in the retailer’s app or on the courier’s own website, typed in yourself. Forward scam texts to 7726 in the United States, the United Kingdom and Canada, and to 0429 999 888 in Australia.
Delivery text check →
Payment pages
A fake checkout on a fake shop, a request to switch to bank transfer or a payment app, or hidden code on a real shop’s checkout that copies card details.
The figureCredit card fraud complaints to the Federal Bureau of Investigation rose 45.8% in 2025, with US$282.7 million lost (Internet Crime Complaint Center, 2025 report).
The checkCheck that the checkout address matches the shop’s address. Stop if the shop asks you to pay by bank transfer, cryptocurrency, a payment app or gift cards. After scanning a payment code, check the recipient’s name. Use a card or method with a refund route.
Before You Pay →
Gift card requests
A caller or message asks for payment, a fee or a “security check” in gift cards, then for the numbers on the back.
The figureIn Federal Trade Commission data for 2024, gift cards were the payment method reported most often for government impersonation, technical support, romance and family impersonation scams (Federal Trade Commission, December 2025).
The checkGift cards are for gifts. Any request to pay with gift cards, or to send photos of card numbers, is a stop sign.
Gift card request check →
Buying and selling on marketplaces
Goods that do not exist, fake transfer screenshots, and “receive payment” links or codes sent to sellers.
The figureNew Zealand Police described one man allegedly obtaining about NZ$150,000 of goods across 17 Facebook Marketplace deals using fake transfer screens (New Zealand Police, 5 June 2025).
The checkAs a seller, confirm the money has arrived in your own banking app before handing anything over; never rely on a screenshot. Never open a “receive payment” link or code.
Scam text check →
Holiday rentals, flights and tickets
Listings and adverts that copy real agencies, press for speed and ask for payment into a personal account.
The figureThe Federal Trade Commission recorded US$274 million lost to travel, vacation and timeshare scams in 2024 (Joint Economic Committee holiday travel alert, December 2025).
The checkBook and pay only inside the booking platform or on the official website. Never pay a personal bank account. A request to move to WhatsApp is a stop sign. Confirm New Year’s Eve and event tickets with the venue.
Before You Pay →
Seasonal jobs and “task” work
Holiday work that asks for fees for training or equipment, or pay for liking and rating products that ends in deposits to “unlock” earnings.
The figureEmployment fraud reached 24,688 complaints and US$362.9 million in the United States in 2025 (Internet Crime Complaint Center, 2025 report).
The checkNever pay to get paid or to withdraw earnings. Confirm the job on the employer’s own website.
Recruiter check →
Calls that copy a relative’s voice
A call or voice message in a loved one’s voice, with an emergency and a request for money.
The figureThe Federal Bureau of Investigation received 22,364 complaints mentioning artificial intelligence in 2025, with about US$893.3 million lost (Internet Crime Complaint Center, 2025 report).
The checkAgree a family safe phrase in person and never share it online. Hang up and call back on a number you already have.
Family Safe Word →
Fake customer support and refunds
A message about an “unauthorised purchase” asks you to call a number, then a fake agent asks to control your computer and “refunds” too much.
The figureTechnical and customer support fraud rose to 47,794 complaints and US$2.13 billion lost in the United States in 2025 (Internet Crime Complaint Center, 2025 report).
The checkReach a company only through its own app or a web address you type. Never call a number from a text or a search advert, and never let a caller take control of your device.
Scam text check →
Shopping account takeover
Passwords leaked elsewhere are tried on shopping and instalment accounts, then contact details are changed and goods bought.
The figureOnline retail account takeovers rose 84% in the United Kingdom from January to June 2026 (Cifas, the United Kingdom fraud prevention service, August 2026).
The checkUse a different password or a passkey for each shopping account, turn on two-step login, act on any “your details have changed” alert, and check January statements.
Turn on two-step login →
Offers to recover lost money
After a loss, a “recovery firm” or someone posing as an official offers to get the money back for a fee.
The figureThe Federal Bureau of Investigation counted about 10,516 recovery-scam complaints and US$1.4 billion lost in 2025 (Internet Crime Complaint Center, 2025 report).
The checkGenuine authorities never contact people offering to recover money for a fee. Type the official reporting address yourself.
First-hour guide →
Quick response (QR) codes
A sticker over the real code on a parking machine, or a code sent to a seller, that leads to a fake payment page.
The figureThe Federal Bureau of Investigation’s holiday warning of December 2025 named altered codes leading to fake login and checkout pages.
The checkFeel for a sticker over the printed code. Pay through the operator’s own app. After scanning, read the full address and the recipient’s name before paying.
Before You Pay →
Lunar New Year red packets
Electronic red packets or festive stickers that arrive as a link or code asking for a login or card details.
The figureThe Hong Kong Monetary Authority warned on 12 February 2026 of “fraudulent Chinese New Year stickers or electronic lai-see with phishing QR codes or hyperlinks”.
The checkOpen red packets only inside the payment app itself. A red packet that arrives as a link asking for a login or card details is a stop sign.
Scam text check →
