Fake Order Scams
What is a "Fake Order Notification" Scam?
A fake order notification scam is a phishing scam where criminals send a fake message claiming that an order, purchase, delivery, subscription, or payment has been made on the victim's account. The message is designed to create panic by suggesting that the victim has been charged for something they did not buy. Scammers often include a fake invoice, order number, tracking link, customer service phone number, or cancellation button. When the victim clicks the link or calls the number, the scammer tries to steal personal information, account credentials, payment details, or remote access to the victim's device. Some versions lead to fake login pages that look like Amazon, PayPal, Apple, Best Buy, Walmart, or a bank. Other versions pressure the victim into "canceling" the order by sharing verification codes, installing software, or sending money. The scam works because it uses urgency, fear of financial loss, and familiar brand names to make the message seem legitimate.
How the Scammers Target New Victims:
Scammers usually contact victims through email, text messages, phone calls or robocalls. Many messages claim that a recent order is being processed, shipped, renewed, or charged to the victim's account. The scam message may include a link to view the order, cancel the purchase, confirm shipping details, or contact support. Some emails include PDF invoices or receipts that contain a phone number for "billing support." Text versions often use short messages such as "Your order has shipped" or "Payment confirmed" followed by a suspicious link. The goal is to make the victim react quickly before checking whether the order is real.
Who the Scammers Impersonate:
Fake Order Notification scammers may impersonate:
- Amazon
- PayPal
- Apple
- Walmart
- Best Buy
- eBay
- Target
- FedEx, UPS, or USPS
- Banks and credit card companies
- Subscription services
- Online retailers and delivery companies
How to Spot a "Fake Order Notification" Scam:
What the Scammers Say (Scam Narratives / Fake Storylines):
Scammers may claim that an expensive item has been ordered, such as a phone, laptop, gift card, appliance, or gaming console. They may say a subscription has renewed, a package is on the way, a payment has been approved, or a delivery address must be confirmed. Some messages say the victim must act immediately to cancel the order before it ships. Others say the victim should call a support number if they did not authorize the purchase. The fake storyline usually involves urgency, a large charge, suspicious account activity, or a shipment that needs immediate attention.
Information the Scammers Ask For:
Scammers may ask for account usernames, passwords, verification codes, credit card numbers, bank details, billing addresses, Social Security numbers, or photos of identification. They may also ask the victim to install remote access software, log in through a fake website, call a fake support line, or provide a one-time passcode. In refund versions of the scam, they may ask the victim to send money, buy gift cards, transfer funds, or return an alleged overpayment.
Scam Warning Signs and Red Flags:
Warning signs include an order you do not recognize, urgent language, poor grammar, suspicious sender addresses, strange links, unexpected attachments, and requests to call a number listed only in the message. A real company will not ask for your password, full payment card number, or verification code to cancel an order. Be suspicious if the message pressures you to act immediately, install software, or handle the issue outside the company's official website or app. Links that do not match the real company domain are also a major red flag. Fake invoices and receipts with phone numbers are especially common in this scam.
Victim Experiences and Scam Reports:
Victims often report receiving a fake receipt or shipping notice for an expensive item they never purchased. Some call the fake customer service number and are told their account was hacked or that they must verify information to stop the charge. Others click a link and enter login details on a fake website, giving scammers access to their real accounts. In more serious cases, victims are tricked into installing remote access software, which allows scammers to view files, steal banking information, or manipulate online accounts. Some victims lose money after being told they must "refund" an accidental overpayment or move funds to protect their account.
Protect Yourself from "Fake Order Notification" Scams:
Dangerous Actions to Avoid:
Do not click links in unexpected order notifications. Do not open attachments from unknown or suspicious senders. Do not call phone numbers listed in suspicious invoices or receipts. Do not provide passwords, verification codes, card numbers, or banking details in response to an unexpected message. Do not install remote access software at the request of someone claiming to be customer support. Do not send gift cards, cryptocurrency, wire transfers, or payment app transfers to cancel or refund an order.
Best Practices to Stay Safe:
Check orders by going directly to the retailer's official website or app instead of using links from the message. Review your payment card or bank account directly to confirm whether a charge is real. Use official customer service numbers from the company's website, not numbers included in suspicious messages. Enable multi-factor authentication on shopping, email, and payment accounts. Report suspicious messages to the company being impersonated and delete the message after reporting it. If you entered login details, change your password immediately and check the account for unauthorized activity.
Key Takeaways to Stay Safe:
Fake order notification scams are designed to make you panic over a purchase you did not make. Treat unexpected order confirmations, invoices, and shipping alerts with caution. Never use links, attachments, or phone numbers from suspicious messages to resolve the issue. Verify purchases only through official websites, apps, or known customer service channels. If the message pressures you to act fast, share sensitive information, install software, or send money, it is likely a scam.
