BogusBazaar: Massive Webshop Fraud Ring Targets Online Shoppers - Cyber and Fraud Centre

A criminal network known as BogusBazaar has emerged as a major threat to online shoppers. This operation has lured hundreds of thousands of victims across the US and Europe to fraudulent online stores. BogusBazaar primarily targets those seeking discounted shoes, clothes and apparel, with the aim of stealing credit card and banking information.

How the Scam Works

Fake Shops: BogusBazaar sets up fake online shops, often using expired domains that have a good reputation with Google. These shops offer popular branded items at heavily discounted prices.
Data Theft: The fake shops use convincing payment pages that collect victims’ credit card information, including names, addresses, and card details.
Fake Purchases: In some cases, the fraudsters process payments for expensive items that the victim never receives. Occasionally, they might send cheap counterfeits to maintain the illusion of legitimacy.

**One of the fraudulent shops**
*Source: SLR*

The Scale of the Threat

Security researchers estimate that the BogusBazaar network comprises over 75,000 fake online stores. Over 850,000 people have been affected by their scams, and the criminals have attempted to process an estimated £40 million in fraudulent orders. Additionally, stolen credit card details are often sold on dark web marketplaces for further criminal use.

**Origin of purchases on BogusBazaar shops**
*Source: SLR*

Protecting Yourself from Webshop Fraud

Be Wary of Too-Good-To-Be-True Deals: If an online price seems incredibly low, treat it with suspicion. Remember, if it sounds too good to be true, it probably is.
Check Shop Legitimacy: Verify a shop’s contact details, return policy, and social media presence. Reliable shops typically invest in establishing a trustworthy online presence.
Use Online Tools: There are services available to help check online shop authenticity, such as the German “Fakeshop Finder.” Search for UK equivalents.
Prefer Secure Payment Methods: Use credit cards for online purchases, as they offer enhanced fraud protection compared to debit cards. Consider using payment services like PayPal, which provide an additional layer of security.

What to Do If You’re a Victim

Contact Your Bank: Immediately report any suspicious transactions to your bank or credit card company to block the card and dispute fraudulent charges.
Change Passwords: If you used the same password on the fraudulent site as you do for other accounts, change them immediately.
Report the Fraud: Alert Trading Standards Scotland via their consumer website at www.consumeradvice.scot/. Additional advice is also available at this site.
Report to the Police: If you’ve suffered significant financial losses, consider reporting to Police Scotland by calling 101 or via the online reporting form.

Staying Safe While Shopping Online

Online shopping is convenient, but it’s essential to remain vigilant. By following these precautions, you can significantly reduce the risk of falling victim to scams like BogusBazaar. Remember to prioritise your online security, and always shop with reputable websites you know and trust.