Black Friday Scams 2026: How to Spot Fake Sites and Phishing

70% off, countdown timers that expire in ten minutes, a text about a parcel stuck at the depot just as you’re waiting on an order. During Black Friday and Cyber Monday week, scammers work harder than anyone, because they know we buy fast and check less. In this guide we’ll show you how to spot Black Friday scams before you pay: fake online stores, phishing texts and emails, bogus social media ads, and what to do right away if you’ve already entered your card details.

Why Black Friday is scammers’ favorite time of year

The playbook never changes: create urgency and lower your guard. Black Friday does half the work for them, because real deals really do last only a few hours and we receive dozens of promotional emails a day. In all that noise, a fake message is much easier to miss.

The four most common scams this time of year are:

• Fake online stores that copy the look of well-known brands, or invent a brand from scratch, and take your money without ever shipping anything.
• Phishing texts and emails that pretend to be couriers, banks and big retailers to steal your login details and card numbers.
• Fake social media ads that lead to cloned sites with impossible prices.
• Bogus gift cards and giveaways that ask you to pay “just the shipping” or fill in a survey with your personal details.

Fake website: 8 warning signs to check before you pay

Today a scam store can look as polished as a real one. So focus on the details scammers struggle to copy:

1. The web address looks odd: swapped letters, hyphens or extra words (“outlet-store-deals”), unusual domain endings. Type the store’s address yourself instead of clicking a link.
2. Everything is suspiciously cheap: a big discount on one product is normal, 70-90% off the whole catalog is not.
3. No company details: no business name, registered address or company registration details, or the information is vague or copied from somewhere else.
4. Contact only via form or chat: no phone number, no email address using the site’s own domain.
5. Unusual payment options: the site accepts only bank transfers, top-ups, cryptocurrency or gift cards. These methods make it nearly impossible to get your money back.
6. Poorly translated text and vague or copy-pasted return policies.
7. Glowing reviews all posted within the same few days, or no reviews anywhere outside the site itself.
8. Aggressive countdown timers and messages like “only 2 left in stock” repeated identically on every product.

The padlock next to the address isn’t enough on its own: it means the connection is encrypted, not that the store is honest. Scam sites have padlocks too.

Phishing texts and emails: parcels, refunds and locked accounts

In the weeks leading up to the holidays, messages that seem to come from couriers, banks and retailers surge. The most common scripts are:

• “Your parcel is waiting”: to release it, you need to pay a small delivery fee. The real goal is your card details.
• “There’s a problem with your order” or “payment declined”: you’re asked to update your payment details on a fake page.
• “You’re owed a refund” or a voucher: to receive it, you have to enter your card and security codes.
• “Suspicious activity on your account”: a fake bank agent calls right after the message to get you to approve a transaction.

The simplest rule is also the most effective: don’t click links in texts or emails. Open the official app of the courier, store or bank yourself and check there. If there’s a real problem, it will show up in the app too. These messages are now written in flawless English, sometimes with the help of AI: we cover that in our guide to AI-powered scams.

Social media deals and fake gift cards

Social feeds fill up with sponsored ads showing brand-name products at rock-bottom prices, often backed by glowing comments and the face of a celebrity. Many lead to cloned sites set up just days earlier and shut down right after Black Friday.

Before buying from an ad:

• search for the store’s name along with words like “reviews” or “scam”;
• check whether the product costs the same on the brand’s official website;
• be wary of recently created profiles with few posts and comments turned off;
• don’t trust anyone who messages you privately with an “exclusive” offer.

The same goes for giveaways: nobody hands out a free smartphone in exchange for a survey. If you’re asked to pay shipping on a prize, it’s a scam.

How to pay safely on Black Friday

Even when the store is legitimate, a few habits cut your risk considerably:

• Use a credit card or a virtual card for online purchases. Some banking apps let you create single-use cards or cards with a spending limit.
• Choose payment methods with buyer protection and a dispute process. Avoid bank transfers and top-ups to strangers.
• Turn on bank notifications for every payment, so you’ll spot a charge you don’t recognize right away.
• Read authorization prompts carefully in your banking app: never approve a payment you didn’t start, even if a so-called “agent” tells you to.
• Protect your shopping accounts with unique passwords and, where possible, passkeys: we explain them in our guide on what passkeys are and how to set them up.
• Avoid public Wi-Fi when entering card details.

Already paid or entered your details? What to do right now

If you realize you bought from a fake site or entered your details on a suspicious page, speed matters:

1. Freeze your card in your banking app or by calling the number on the back of the card.
2. Contact your bank or card issuer to dispute the charge and ask for a refund. Tell them it was fraud.
3. Change your password on the account you used, and on every other account that shares the same password.
4. Keep the evidence: screenshots of the site, confirmation emails, texts and your payment receipt.
5. Report the scam: in the US, to the FTC at reportfraud.ftc.gov; in the UK, to Action Fraud (actionfraud.police.uk); and to your local police.
6. Check your phone if you installed an app or opened a file received by text: our guide on how to tell if your phone has been spied on or hacked walks you through the checks.

Frequently asked questions

How can I tell if an online store is legitimate?

Check that it lists full company details, real contact information, clear return terms and reviews on independent sites. Be wary of stores that accept only bank transfers or gift cards.

Does the padlock in the address bar mean a site is safe?

No. It only means the connection is encrypted. A scam site can have a padlock too.

I got a text about a parcel waiting for me. What should I do?

Don’t click the link. If you’re genuinely expecting a delivery, check its status in the courier’s or store’s official app using your order’s tracking number.

Can I get my money back if I paid a fake site?

It depends on how you paid. With a card, you can ask your bank to dispute the charge; with bank transfers, top-ups or cryptocurrency, recovery is far harder. That’s why it pays to act immediately.

The bottom line

On Black Friday, a rush is a scammer’s best friend. Before you pay, check the site’s address, the company details and the payment methods on offer. Don’t click links in texts or emails; open the official app yourself. Use a credit card or virtual card and turn on bank notifications. If something goes wrong, freeze your card and report it right away: every minute counts.