← Back to Glossary

Fake Shops

A fake shop (also called a scam shop or fraudulent webshop) is a website that impersonates a legitimate brand or retailer to deceive consumers into making purchases for goods that are counterfeit, never delivered, or used as a pretext to steal payment information and personal data.

How Fake Shops Work

Fake shops follow a repeatable playbook that can be deployed at scale:

1. Domain Setup

The operator registers a domain that either contains the target brand name (e.g., nike-clearance-sale.com) or uses an unrelated domain that is later filled with brand-impersonating content. Expired domains with existing search authority are particularly valuable because they can rank in search results faster.

2. Content Cloning

Product images, descriptions, logos, and branding elements are copied from the legitimate brand's website. Modern cloning tools can replicate an entire e-commerce storefront in minutes. The fake shop typically offers prices 50-80% below retail to attract deal-seeking consumers.

3. Traffic Acquisition

Fake shops drive traffic through:

  • Paid search ads — Bidding on brand name keywords on Google and Bing
  • Social media ads — Running promotional ads on Facebook, Instagram, and TikTok
  • SEO — Using the stolen brand content to rank for product-related searches
  • Email spam — Sending promotional emails with "exclusive deals"
  • Expired domain authority — Leveraging the SEO value of previously legitimate domains

4. Transaction

When a consumer places an order, one of several outcomes occurs:

  • Payment is collected but no product is shipped
  • A low-quality counterfeit item is shipped
  • Payment details are harvested for subsequent fraudulent transactions
  • Personal data (name, address, email) is collected and sold

5. Rotation

Once a fake shop is reported or taken down, the operator activates a new domain from a pre-registered pool and repeats the process. Sophisticated operations maintain hundreds or thousands of domains in various stages of this cycle.

The Scale of Fake Shops

BogusBazaar Network (2024)

In May 2024, the security research firm SRLabs published findings on BogusBazaar, one of the largest documented fake shop networks. Key findings:

  • 75,000+ fake shop domains operated by a single network
  • Over 1 million orders processed
  • Approximately 850,000 victims, primarily in the United States and Western Europe
  • The network used a centralized infrastructure with automated shop generation — capable of deploying new storefronts at scale
  • Domains impersonated major brands across fashion, electronics, and consumer goods

EU Counterfeit Market

The European Union Intellectual Property Office (EUIPO) reported in its 2024 status report that:

  • EU customs authorities seized approximately 112 million counterfeit articles in 2023
  • The estimated economic cost of counterfeiting to EU industries is approximately 83 billion euros annually in lost sales
  • Online channels account for a growing share of counterfeit distribution, with social media platforms increasingly used as storefronts

Consumer Impact

Consumer protection data from European authorities illustrates the breadth of the problem:

  • Austria's Internet Ombudsman (Watchlist Internet) received over 28,000 reports of online shopping fraud in 2023
  • The Austrian Fake-Shop Detector initiative, developed by the Austrian Institute of Technology and X-Net, maintains a database of over 10,000 known fraudulent online shops
  • Germany's Consumer Centre (Verbraucherzentrale) consistently ranks fake shops among the top three online fraud categories in consumer complaint data

How Fake Shops Damage Brands

The harm from fake shops extends beyond direct consumer fraud:

Customer trust erosion. Consumers who are scammed by a fake shop impersonating your brand may blame your brand, not the fraudster. This leads to negative reviews, social media complaints, and lost customer lifetime value.

Support costs. Customer service teams handle complaints, refund requests, and fraud reports from victims of fake shops using your brand. This is a direct operational cost that scales with the number of active fake shops.

Revenue diversion. Every purchase made at a fake shop is a sale that could have occurred at a legitimate retailer. When fake shops bid on your brand keywords in paid search, they also drive up your own advertising costs.

SEO pollution. Fake shops that copy your product content create duplicate content issues and can outrank legitimate product pages if they operate on domains with existing authority.

Regulatory exposure. Under laws like the EU's Digital Services Act and national consumer protection regulations, brands face increasing pressure to demonstrate they are actively combating counterfeit distribution bearing their trademarks.

Detecting and Removing Fake Shops

Effective fake shop detection combines multiple monitoring approaches:

Detection Method What It Catches Limitations
Domain monitoring New registrations containing brand terms Doesn't catch unrelated domains with brand content
Web content monitoring Sites using your images, logos, product data Requires crawling and image comparison
Ad monitoring Paid ads bidding on your brand keywords Platform-specific, requires API access
Social media monitoring Fake brand pages and sponsored posts Varies by platform openness
Consumer reports Active scam sites with victims Reactive — damage already done

Enforcement options for removing fake shops include:

  • Domain-level takedown — Filing abuse complaints with the domain registrar, requesting suspension under the registration agreement's anti-abuse provisions
  • Hosting-level takedown — Reporting to the web hosting provider under their acceptable use policy
  • Search engine delisting — Requesting removal from Google and Bing search results
  • Platform ad removal — Reporting trademark-infringing ads to the advertising platform
  • Payment processor notification — Alerting payment providers (Visa, Mastercard, PayPal) to fraudulent merchant accounts

The most effective approach combines automated detection with rapid enforcement across multiple channels simultaneously — shutting down the domain, hosting, search visibility, and payment processing at the same time to minimize the window for consumer harm.

Your brand is likely already being impersonated somewhere online.

In the demo we show you:

  • How many active threats target your brand right now

  • How quickly Astra detects them

  • How fast they can be removed with instant approval