What are the red flags of this scam?

You found the store through a social media ad (Instagram, TikTok, Facebook) offering a very large discount — 50–80% off a popular brand • The URL is not the brand's official domain (e.g., lululemon.com, bestbuy.ca) — it uses hyphens, extra words, or a different TLD like .shop, .store, or .ca with a different brand prefix • The site asks you to pay by Interac e-transfer, gift card, or cryptocurrency — legitimate Canadian retailers never require this • Clicking 'Buy' leads to a checkout page asking for full credit card details on a domain that is not the retailer's own • Contact info is missing, uses a Gmail or Hotmail address, or links to a generic business registration in a country unrelated to the brand • The ad or site appeared only recently (a few weeks old), has no verifiable reviews, and all displayed reviews are positive with no variety • A QR code in an ad, email, or packaging insert leads to a checkout or login page — never scan shopping QR codes; go directly to the brand's official URL

What should I do if this happened to me?

Never click shopping links in social media ads for brands you want — go directly to the official site by typing it into your browser (lululemon.com, bestbuy.ca, etc.) • Before entering payment info, check the URL in your browser bar carefully: it must be the brand's exact official domain — no extra words, hyphens, or different TLDs • Pay by credit card when shopping online — credit cards offer chargeback rights. If you paid by e-transfer or crypto, recovery is extremely difficult • If you already paid on a fake site: call your bank immediately to dispute the charge (if by credit/debit card) or contact Interac fraud line if by e-transfer • If you entered your card number on a fake checkout page: ask your bank to cancel and reissue the card even if no charge has appeared yet • Report fake storefronts to the Canadian Centre for Cyber Security at cyber.gc.ca and to the platform (Instagram, TikTok, Facebook) where you saw the ad • Report to the Canadian Anti-Fraud Centre at https://antifraudcentre-centreantifraude.ca or call 1-888-495-8501.

HIGH phishing Last reported: Oct 19, 2026 Share

A social media ad links to a convincing fake online store — you pay and receive nothing

Q: Is this a scam?

Yes. This is a documented scam pattern. Social media ads (Instagram, TikTok, Facebook) promote AI-built fake storefronts impersonating Lululemon, Aritzia, Best Buy, and other Canadian retailers. You pay by card or e-transfer; the site steals your payment or ships nothing. The Canadian Centre for Cyber Security warned October 2026.

Social media ads (Instagram, TikTok, Facebook) promote AI-built fake storefronts impersonating Lululemon, Aritzia, Best Buy, and other Canadian retailers. You pay by card or e-transfer; the site steals your payment or ships nothing. The Canadian Centre for Cyber Security warned October 2026.

Also known as: fake online store Canada, lookalike retailer website scam, fake lululemon website Canada, fake Best Buy website scam, Instagram ad fake store Canada, TikTok shopping scam Canada, AI fake storefront Canada, holiday shopping scam Canada, fake retailer checkout page, fraudulent e-commerce site Canada

Already happened to you? Do this in the next few minutes

1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.

What to do right now

1 Never click shopping links in social media ads for brands you want — go directly to the official site by typing it into your browser (lululemon.com, bestbuy.ca, etc.)
2 Before entering payment info, check the URL in your browser bar carefully: it must be the brand's exact official domain — no extra words, hyphens, or different TLDs
3 Pay by credit card when shopping online — credit cards offer chargeback rights. If you paid by e-transfer or crypto, recovery is extremely difficult
4 If you already paid on a fake site: call your bank immediately to dispute the charge (if by credit/debit card) or contact Interac fraud line if by e-transfer
5 If you entered your card number on a fake checkout page: ask your bank to cancel and reissue the card even if no charge has appeared yet
6 Report fake storefronts to the Canadian Centre for Cyber Security at cyber.gc.ca and to the platform (Instagram, TikTok, Facebook) where you saw the ad
7 Report to the Canadian Anti-Fraud Centre at https://antifraudcentre-centreantifraude.ca or call 1-888-495-8501.

Red flags

⚠ You found the store through a social media ad (Instagram, TikTok, Facebook) offering a very large discount — 50–80% off a popular brand
⚠ The URL is not the brand's official domain (e.g., lululemon.com, bestbuy.ca) — it uses hyphens, extra words, or a different TLD like .shop, .store, or .ca with a different brand prefix
⚠ The site asks you to pay by Interac e-transfer, gift card, or cryptocurrency — legitimate Canadian retailers never require this
⚠ Clicking 'Buy' leads to a checkout page asking for full credit card details on a domain that is not the retailer's own
⚠ Contact info is missing, uses a Gmail or Hotmail address, or links to a generic business registration in a country unrelated to the brand
⚠ The ad or site appeared only recently (a few weeks old), has no verifiable reviews, and all displayed reviews are positive with no variety
⚠ A QR code in an ad, email, or packaging insert leads to a checkout or login page — never scan shopping QR codes; go directly to the brand's official URL

Already happened to you? Do this in the next few minutes

What to do right now

Red flags

Sources