Holiday shopping season is open, and the scammers are already ahead of you. A new report released this morning — Scamwise's 2026 Holiday Report from Savi Security — found that a new fake online store is being reported roughly every three minutes, about 500 a day, and that fake holiday-themed stores have multiplied fivefold in the last 60 days. If you've typed "is this website legit" or "is this site legit" into Google lately, you're not alone: those exact queries are rising fast in the US right now.
This guide explains what the new report uncovered, how AI turned scam stores into a mass-production business, and the red flags that expose a fake holiday shop — plus a two-minute check to run before you enter your card details anywhere.
1. What the new report actually found
Scamwise's 2026 Holiday Report (published October 20, 2026 by Savi Security) is the most detailed snapshot of the fake-store economy this year. The headline numbers:
- A new fake store reported roughly every 3 minutes — about 500 per day.
- Fake holiday-themed stores are up 5x in the last 60 days alone, timed for the shopping season.
- At least 1 in 5 fake stores was first spotted through ads on major platforms — Meta and Google ads are a primary delivery channel for these scams.
- myshopify.com is the most common domain among confirmed scam cases — outranking Amazon, Etsy, and eBay. Scammers spin up free Shopify storefronts, run ads, collect orders, and vanish.
- 7 in 10 fake stores appear once and never again — they're disposable by design.
- Nearly 40% were under 90 days old when first reported. Newness is the pattern.
The same launch announced a free Scamwise Chrome extension and early access to a Scamwise MCP server for AI assistants. The tooling is catching up — but only if shoppers actually check before they buy.
2. Why AI made fake stores a mass-production business
A convincing scam store used to take days to build: write the copy, steal product photos, build trust pages, fake a checkout. AI collapsed that to minutes:
- Copy and product descriptions are generated in seconds — fluent English (or German, French, Spanish) at near-zero cost.
- Store layouts are templates. Shopify, Wix, and free themes give any scammer a professional-looking shop for free; AI fills in the rest.
- Reviews are fabricated in bulk. AI-written testimonials populate the store's "customer reviews" sections — five-star walls that exist to disarm your skepticism.
- Ads are the fuel. Polished ad creatives on Meta and Google drive holiday-hungry traffic to a store that may only exist for a week.
The result: one operator can run dozens of stores at once. When one gets flagged, the next is already live.
3. The two-funnel playbook: fake ads, fake storefronts
Most fake holiday stores run the same two-step pipeline:
Step 1 — The ad. You see it on Facebook, Instagram, or Google: a viral product at a jaw-dropping price, "holiday sale ends tonight," professional-looking video. At least one in five confirmed fake stores was traced back to ads on Meta or Google — the report says so outright.
Step 2 — The store. The link lands you on a clean-looking webshop — often a myshopify.com subdomain or a lookalike domain. Prices are low, the "reviews" are glowing, the checkout looks normal. You pay, and then: the item never arrives, or a cheap knockoff shows up weeks later from a different continent.
Sometimes there's a third step: harvested payment data — card details used for follow-on fraud. This is why the payment method matters as much as the store.
4. Seven red flags of a fake holiday store
Run any suspicious shop through this list before you buy:
1. The domain is brand new. Nearly 40% of confirmed fake stores were under 90 days old when first reported. New domains plus heavy ad spend is the classic shape.
2. It's a free-platform subdomain. A "store" living at something.myshopify.com (or another free storefront host) with no custom domain and no business identity behind it deserves extra scrutiny. Legitimate brands buy their own domain.
3. The discount defies economics. An $89 gadget for $19.99 — or €199 headphones for €29. Real sales go to 20–40%; "90% OFF EVERYTHING, TODAY ONLY" is bait.
4. No real contact details. No address, no phone number, no company name — or a contact page with only a form. In the EU, online sellers are legally required to show their identity; its absence is a loud signal.
5. Copied product photos and text. Right-click an image and search it — if the same photos appear on a dozen other "stores," none of them are real shops.
6. Store "reviews" that read like templates. Walls of five-star praise with no specifics, no dates, no verified-buyer details. Genuine reviews are mixed, specific, and spread over time.
7. Pressure tactics everywhere. Countdown timers resetting on refresh, "only 2 left" on every product, popups offering 15% off if you buy in the next ten minutes. Real stores sell products; fake ones sell urgency.
If three or more of these hit, close the tab.
5. Europe-specific checks most shoppers skip
European shoppers have legal tools Americans don't — use them:
- The legal imprint. In Germany, Austria, and several other EU countries, commercial websites must publish an Impressum with the company name, address, and registration details. No imprint, no trust.
- The 14-day right of withdrawal. EU consumer law gives you 14 days to return most online purchases for a full refund. A store whose terms hide or deny this is breaking the rules.
- Check the company. For UK stores, Companies House lets you look up whether the company actually exists. For cross-border EU cases, the ECC-Net network helps with complaints.
- Payment norms matter. In much of Europe, legitimate stores offer bank transfer, Klarna, or invoice options alongside cards. A store that takes ONLY card payments or wire transfers — and no PayPal or credit card with buyer protection — is waving a flag.
- Seasonal camouflage. Scammers dress stores for the calendar: Black Friday and Cyber Monday in November, Christmas markets in December, Boxing Day sales in the UK and Ireland, les soldes d'hiver in France. A holiday theme is not a trust signal.
6. The two-minute check before you enter card details
Before you buy from any unfamiliar store:
1. Run the store through a website scam checker. Our free website scam checker looks at the domain age, contact details, business identity, and other trust signals — the exact things fake stores try to hide. Remember the report's number: nearly 40% of fake stores were under 90 days old.
2. Search the store name + "scam" or "reviews." Real victims post warnings. No results at all for a store running big ads is itself suspicious.
3. Check the domain, not the ad. Ads on Meta and Google can carry fake stores — 1 in 5 confirmed cases got their traffic that way. The ad platform is not a verification service.
4. Pay with protection. Use a credit card or PayPal with buyer protection — never wire transfers, gift cards, or crypto. If the store only accepts irreversible payment methods, walk away.
Our full walkthrough of domain and business-identity checks is in our website legitimacy guide: https://fakereviewdetector.org/blog/is-this-website-legit-how-to-check-online-store-safe
7. The reviews on the store page? Verify them too
Fake stores don't just fake products — they fake the reviews on their own pages. Those glowing testimonials are written by the same operation that built the shop, and there's no platform moderation catching them.
If a store's reviews look manufactured — identical phrasing, no specifics, all five stars — paste the review text into our free fake review checker. It reads the language patterns that separate genuine write-ups from fabricated ones. One honest note about how it works: the checker reads review text you paste in — it does not fetch store pages or analyze links on its own. Copy the suspicious review, paste it in, and get a verdict on the words themselves.
AI-generated store reviews are exactly the kind of content our AI-generated fake reviews guide teaches you to spot: https://fakereviewdetector.org/blog/how-to-spot-ai-generated-fake-reviews
8. Already bought from one? Here's what to do
Act fast — fake stores disappear in days:
1. Stop further charges. If you saved the card on the site, remove it. If you see follow-on charges, call your bank immediately.
2. Request a chargeback. Credit card companies and PayPal offer buyer protection for items never received or not as described. File within your card's dispute window.
3. Report the store. In the US, report to the FTC at ReportFraud.ftc.gov. In the UK, report to Action Fraud. In the EU, use your national consumer center or the ECC-Net network. Report the ads too — on Meta and Google's ad-reporting pages.
4. Document everything. Screenshot the store, the order confirmation, and the payment — the store will likely vanish, and 7 in 10 fake stores never reappear.
A new fake store goes live every three minutes this season. Two minutes of checking before you buy is the cheapest insurance in online shopping.
Sources: Scamwise 2026 Holiday Report (Savi Security, published Oct 20, 2026 via GlobeNewswire, 08:00 ET); Google Trends (US/UK/DE/FR/IT/ES/NL, past 7 + 30 days, checked Oct 20, 2026); also see our Black Friday scam-deals guide https://fakereviewdetector.org/blog/black-friday-2026-fake-reviews-scam-deals-guide and our phishing fake-site guide https://fakereviewdetector.org/blog/phishing-scam-websites-how-to-spot-fake-sites-2026.
Explore the evidence behind your next question.
Start a website check