Massive Fake Online Shop Network Discovered
A network of 119,000 fraudulent domains has been identified for stealing consumer payment card information.
Updated on Sept. 20, 2026 in Couponing
Live Poll
Do you trust your ability to identify fake online stores when shopping on the internet?
Cybersecurity firm Nebty has uncovered a sprawling network called DoppelCart that mimics over 44,000 legitimate brands. The operation uses deceptive sites to harvest credit card numbers, expiration dates, and security codes from unsuspecting shoppers.
Why it matters
The discovery marks the largest publicly documented fake-shop cluster, posing a significant risk to global e-commerce security. By leveraging assets from real brand servers, these sites create a convincing veneer that can trick even cautious consumers.
The DoppelCart network utilizes 119,000 domains to mimic 44,182 unique brands. These fake sites frequently entice shoppers with discounts reaching up to 65% off retail prices.
The players
Nebty
Nebty is a Germany-based cybersecurity firm that specializes in identifying and mitigating large-scale online fraud networks.
The details
The DoppelCart operation scrapes product catalogs, branding, and imagery from legitimate businesses to populate its deceptive storefronts. Once a user proceeds to checkout, the sites execute malicious code designed to capture sensitive personal and financial data.
Timeline
September 20, 2026: The discovery of the DoppelCart operation was reported.
Culture Shift
The rise of massive automated fraud operations like DoppelCart marks a departure from individual phishing attempts toward industrialized digital deception. This shift forces a re-evaluation of how consumers verify the legitimacy of online retailers amidst increasingly sophisticated mimicry.
Shoppers should be wary of any site offering discounts as high as 65%, especially if the URL appears suspicious or the site lacks verified contact information. Always check the browser address bar for correct spelling and avoid entering payment details on unfamiliar domains.
The takeaway
Consumers should prioritize shopping only on official brand websites or verified retail platforms to avoid data theft. Be particularly cautious of heavily discounted items that seem too good to be true, as these are often bait used to harvest sensitive card information.
Further reading
Learn more about spotting digital scams by visiting our Couponing section.
Source note: This article includes information reported by MoneyControl.
Live Poll
Do you trust your ability to identify fake online stores when shopping on the internet?
