Online shopping scams: the field guide to every trick in the book
Here's the strangely comforting truth about online shopping scams: there aren't that many of them. The costumes change constantly — new sites, new ads, new sob stories — but underneath, scammers run the same seven plays on repeat, because the plays work on people who haven't seen them named.
So let's name them. This is the field guide: every major trick in the book, how each one works, the tells that expose it in seconds, and what to do if one already got you. Read it once and you'll recognize the plays forever — which is precisely what makes them stop working.
Play #1: The Fake Storefront
A whole store built to take payments and ship nothing — polished design, stolen product photos, brand names at 80–90% off, urgency everywhere ("closing sale!", countdown timers). You find it through a social media ad, pay, and receive either nothing or a $2 trinket (more on that trick below).
The tells
No findable buyer-protection or returns policy anywhere on the site
Payment by bank transfer, crypto, or gift cards only
A domain registered weeks ago (searchable in seconds)
Contact info that's a single web form
The master tell: branded goods at impossible prices — real deep discounts happen on unbranded goods; a luxury bag at 90% off is either counterfeit or nonexistent
The defense
Buy from unfamiliar stores only after a five-minute vet — independent reviews, protection policy located, protected payment accepted — and start with a small test order. Or simply stay on major platforms, whose buyer protection exists for exactly this.
Play #2: The Phantom Tracking Number
A scam seller "ships" your order with a real, working tracking number — for a package sent to a different address in your city, or an empty envelope. Tracking shows "delivered," the platform sees a completed order, and your dispute suddenly requires proving a negative.
The tells
A delivery city that's yours but an address that isn't
A package weight of 20 grams for your "laptop stand"
Dates that predate your purchase — a recycled number from an old shipment
The defense
When something feels off, read the tracking details, not just the status. In a dispute, the mismatched weight, address, or date is your evidence — platforms know this scam well and rule for buyers who document it. Screenshot everything.
Play #3: The Delivery-Fee Text
An SMS or email, dressed as your postal service or a courier: "Your package is held — pay a small customs/redelivery fee to release it." The link leads to a fake carrier page that harvests your card details. It works because real duties notices exist — the scam wears a real process as a costume.
The tells
A fee that's oddly small (the real prize is your card, not the $1.99)
A link domain that isn't the carrier's actual website
Urgency and threats of return "within 24 hours"
The definitive check: it references no package you can identify
The defense
Never pay through a message link. Go to the carrier's real site or app and check the tracking number there — or better, check your own dashboard of everything you're actually expecting. A payment request for a package that isn't in your timeline answers itself. (Real duties notices, for the record, reference a real shipment with your real tracking number — and land in spam constantly, which is why knowing what you're expecting matters.)
Play #4: The Bait-And-Switch (And Its Cousin, The $2 Trinket)
You ordered the drone; you received a keychain. Or the fine print said "price for the cable only." The seller now has a "delivered" scan and hopes you'll give up over the hassle. The trinket version is deliberate: shipping something cheap creates a tracking record that muddies a "not received" dispute.
The tells
Listings with vague titles and suspiciously low prices
Product photos inconsistent with each other
Reviews mentioning "got something completely different"
After delivery: the package weight in tracking versus what you ordered
The defense
Comment-section research before buying. After: photograph what arrived (with packaging and label), file a "not as described" dispute, attach the listing screenshot. This is a winnable dispute when documented — which is why the checkout screenshot habit exists.
Play #5: The Off-Platform Lure
A marketplace seller — or a "helpful" stranger in comments — suggests completing the deal outside the platform: direct transfer, a messaging app, "to avoid fees." The moment payment leaves the platform, every protection evaporates, which is the entire point.
The tells
It is the tell. Any request to pay off-platform, on any pretext, from any seller, is the play itself.
The defense
One rule, no exceptions: money and messages stay on-platform. Report sellers who ask otherwise — platforms ban for this, because they know exactly what it means.
Play #6: The Fake "Order Confirmation"
An email or text about an order you never placed — "Your $499 purchase is confirmed, click here to cancel" — designed to panic you into clicking a credential-harvesting link or calling a "support line" that talks you into remote access or gift cards.
The tells
You don't recognize the order (trust that instinct — don't let the email argue you out of it)
The sender domain is off by a letter
The "cancel" path demands login credentials or payment info
Phone support pressures you toward gift cards or screen-sharing
The defense
Never click — go to the store's real site or app and check your actual order history. No order there means the email is theater; delete and move on. Real accidental charges are handled through your card provider, never through a link in the message that announced them.
Play #7: The Account Takeover
Not a purchase scam but the infrastructure behind many — your marketplace account, taken via a phished password, becomes the scammer's tool: saved cards charged, gift balances drained, or your good buyer reputation used to run other plays.
The tells
Login alerts you didn't trigger
Orders in your history you didn't place
Changed delivery addresses in your saved list
The defense
The boring trinity — unique passwords per shopping site, two-factor authentication on anything holding a card, and a periodic glance at saved addresses and payment methods. Plus the habit you already have if you've read this far: knowing your own order timeline means a foreign order in your history gets spotted in days, not statements.
The Scammer's Calendar (Yes, They Have One Too)
One more layer of protection: knowing when the plays intensify. Scam volume isn't flat across the year — it tracks the shopping calendar, because scams work best when they blend into legitimate noise.
Sale seasons are scam seasons
During Black Friday and 11.11, fake storefronts bloom in social feeds (Play #1 dressed in sale banners), and "too good" prices camouflage perfectly among genuinely deep discounts. Your defenses matter double when everyone's guard is intentionally lowered by real bargains everywhere.
Delivery-fee texts peak when you're expecting packages
The fee-text play works best in December, when nearly everyone has something in transit and a "your package is held" message feels plausible. This is exactly when the "check your own timeline first" habit earns its keep — in a season of ten in-flight orders, knowing your ten is what exposes the eleventh.
Fake confirmations spike after gift seasons
January inboxes fill with "your recent order" phishing, betting that December's real order chaos left you unable to remember what you bought. (Another quiet argument for one tidy order timeline instead of a memory test.)
Gift-giving windows bring gift-card demands
Any "support agent," "customs office," or "delivery company" that wants payment in gift cards is a scammer, full stop, every time, no exceptions — but the play spikes around holidays when gift cards feel like a normal thing to have and discuss.
If One Already Got You: The Recovery Sequence
Getting scammed isn't a character flaw — the plays are engineered by professionals. The sequence, fast:
On-platform purchase? Open the dispute now with everything documented. This is the exact case protection exists for.
Paid by card? Contact your bank or card provider for a chargeback — item-not-received and fraud both qualify, with generous windows.
Credentials exposed? Change the password immediately, everywhere it was reused, and turn on two-factor.
Report it — to the platform (gets the seller banned), and to your country's fraud-reporting service (builds the case files that take networks down).
Skip the shame. Tell people, actually — every named scam in a group chat is a play that stops working on someone you like.
The Takeaway
Seven plays, endlessly re-costumed: the fake store, the phantom tracking, the fee text, the bait-and-switch, the off-platform lure, the fake confirmation, the account takeover. Every one of them defeats calm and dies in daylight — a thirty-second vet, a glance at tracking details, a refusal to click message links, money kept on-platform, and your own order timeline known cold. Scammers need speed, panic, or ignorance; deny all three and you can shop the entire internet like you own the place. Now you know the plays. They only work in the dark.
FAQs
How can I tell if an online store is fake?
Check for a findable returns/protection policy, protected payment options (never transfer/crypto/gift cards only), independent reviews, and domain age. Branded goods at 80–90% off is the giveaway — real stores can't do that.
I got a text about a package fee. Is it real?
Verify on the carrier's real site or your own tracking dashboard — never through the message's link. Real duties notices reference a shipment you can identify; fee requests for mystery packages are phishing.
Tracking says delivered but I ordered from a sketchy seller and got nothing. Now what?
Check the tracking details (delivery address area, package weight, dates) — mismatches expose the phantom-tracking scam and win disputes. Screenshot and file with the platform.
A seller wants to complete the sale off-platform for a discount. Safe?
No — this is itself the scam. Off-platform payment removes every protection. Decline and report.
I received a confirmation for an order I never placed. What do I do?
Don't click anything in the message. Check your real order history on the store's actual site; if the order isn't there, it's phishing — delete it.
I already paid a scammer. Can I get my money back?
Often yes: platform dispute first (if on-platform), card chargeback second (generous fraud windows). Move fast, document everything, change any exposed passwords, and report the scam.
Know what you're expecting, and no scam surprises you — every real order in one timeline with Parcel Monitor. Free, always.
