Experts have issued a warning about a fake Marks and Spencer website that aims to steal personal data from shoppers.
The site will pop up as an advert that takes you to the misleading page, which isn't associated with M&S in any way. It'll then ask shoppers to input sensitive information that could lead to fraudsters stealing their data.
The warning was shared by online discount platform Wethrift, and the founder has issued some information about the false site and what happens when people come across it.
Wales Online reports that Nick Drewe, founder of the discount site, said: "These misleading scam adverts are sending shoppers to fake websites that have nothing to do with M&S, luring them in with the opportunity to receive a £100 gift card.
"Once shoppers are directed to the fake website, the page will then ask for personal data, tricking shoppers into being potential victims of fraud."
With online shopping now hugely popular, scams are unfortunately becoming more and more common.
To help people keep safe, Nick has shared some useful information to be aware of when placing online orders.
Order confirmation scams
A common phishing technique to look out for is fake order confirmation emails. These emails will claim that an order has been confirmed, but won't actually tell you what the order is.
Instead, you'll be encouraged to click on a link to find out. If you do, you will then be directed to a page that looks just like the retailer's site, but it'll be fraudsters who will receive your personal information if you have inputted it anywhere.
Fake invoices
Another example is a fake invoice from a scammer, claiming that your payment hasn't been received. It will then ask you to re-enter your bank details or a request from someone on PayPal asking for payment.
If you receive one of these invoices unexpectedly, regardless of whether you think you have tried to purchase, make sure you read through the information carefully and compare it against your most recent bank statement.
Billing error scam
Often, scammers will email shoppers saying their billing information is incorrect, and that they need to change them immediately or they will lose out on an order.
Usually, when there is a sense of urgency, that's when you should be suspicious, as they hope to draw you into entering your bank details into a fake website that they've made to look like the real deal.
If you are unsure at all about whether an order has gone through, contact the retailer directly with any order confirmation or information so they can give you legitimate information on your account.
Receiving instant messages
Often, you may receive a suspicious-looking message with a link to a well-known website, urging you to click to secure a great deal.
However, the link will most likely be fake, and clicking on it will unleash an intrusion of malware on your device, making your personal information vulnerable.
Scammers will replicate the URL of the retailer’s website and layouts URLs, and as time has gone on, they have become extremely good at it - making it hard to spot whether it is fraudulent or not.
Once they have encouraged people to click, they will then send phishing messages and keylogging malware straight to the target's device.
Phishing emails
A slightly more modern method of fraud is phishing emails that trick users into disclosing sensitive confidential information. Therefore, it is important to not click on any links or pop-ups from sources that you are not familiar with.
The same thing goes for websites. From dodgy URLs (ones with no ‘https.’ or locked padlock symbol on the bar) to poor website design, there are plenty of fraudulent sites you must be wary of.
Fake product reviews
Fake Amazon reviews have particularly skyrocketed this year. These reviews usually feature unusual turns of phrases and are over-packed with technical jargon.
However, humans are the ones promoting these, often for payment from the product manufacturer in return.
There are 'review exchange' clubs online, normally on social media sites, where sellers on sites like Amazon will offer goods in return for overly generous comments - often ones that are extremely misleading.
If you think you've been scammed
Contact your bank – This should be the first thing you do, especially if money has already been taken from your account. Immediately replace your cards and change your security details. If you have been scammed, your bank is obligated by law to refund you.
Contact Action Fraud – This is the UK's national fraud and cybercrime reporting centre: Run. You can contact them on 0300 123 2040 to report a scam or visit the ActionFraud website.
Contact the police on 101 – If you are currently being subjected to a live and ongoing cyber attack then contact the police on 101- the earlier the better.
Don't miss the latest news from around Scotland and beyond - sign up to our daily newsletter here.
