The Singapore Shopper’s Guide to Spotting a Fake Online Shop, Checking the Website, Paying Safely and Acting Fast If Something Goes Wrong
Description: How to spot a fake online shop before you pay: domain checks, cloned brand sites, too-good prices, safer payment methods, ScamShield checks, and what Singapore shoppers should do within the first hour if they have already paid.
Primary Keyword: fake online shop
Secondary Keywords: fake shopping website, cloned brand website, check website before paying, online shopping scam Singapore, ScamShield check link, e-commerce scam, phishing website, what to do if scammed
Website: wahliao.com
Article Type: Series Guide
Parent Article: How Shopping Works | Shopping Scams in Singapore
Last checked: 18 October 2026
Quick Answer
A fake online shop is a website built to look like a real store, so that you will pay for something that never arrives.
Some fake shops are invented from scratch.
Others copy a real brand’s website, logo and photos, and sit on an address that is almost, but not quite, the real one.
A fake online shop usually has a few things in common.
The price is unusually low.
The deal is “ending soon”.
The address bar is slightly off.
The business behind it is hard to pin down.
The payment page pushes you towards a bank transfer or asks for more than it should.
None of these alone proves a scam.
Together, they are a pattern.
The smart shopper does not only ask:
“Does this website look real?”
The smart shopper asks:
“Can I prove who is behind this website, and if it goes wrong, which route will help me get my money back?”
1. A Fake Shop Is a Stage Set, Not a Shop
A real online shop is the front of a business.
Behind the product photos there is stock, a warehouse or supplier, a delivery arrangement, a customer service team and a company that can be found.
A fake online shop is only the front.
It is a stage set.
The photos are borrowed.
The reviews are written by the same people who built the site.
The “about us” page describes a business that does not exist.
The checkout works perfectly, because taking your money is the only part that has to work.
A good-looking website proves someone can design. It does not prove someone can deliver.
So the checks in this guide are not about whether a site looks nice.
They are about the parts that are harder to fake: the address, the business, the payment route and your own records.
2. How People End Up on a Fake Shop
Fake shops rarely wait to be found.
They come to you.
The Singapore Police Force’s Annual Scam and Cybercrime Brief 2025 says 2,670 phishing cases that year involved deals on social media that led to fraudulent links, with about S$4.6 million lost.
The examples it gives include heavily discounted transport cards and food promotions.
So the most common doorway is not a search engine.
It is an advert or post that interrupts your scroll.
Examples:
a sponsored post showing a branded item at a fraction of the usual price
a “clearance sale” or “closing down” page shared in a chat group
an SMS or email with a link to a “member’s exclusive” promotion
a short video with a link in the caption or profile
a search result for a popular item that leads to an unfamiliar domain
A shop you reached by typing a known address carries less risk than one you reached through a link someone sent you.
3. Two Kinds of Fake: Invented Shops and Cloned Brand Sites
It helps to separate fake online shops into two types.
The first is the invented shop.
It has its own name, its own logo and its own story.
The name sounds plausible, sometimes with “SG” or “Singapore” added to sound local.
The second is the cloned brand site.
It copies a real company.
The logo, colours, layout and product photos are lifted from the genuine website.
The difference is in the address, and in what happens when you pay.
A December 2022 joint advisory by the police and the Cyber Security Agency of Singapore (CSA) described fake websites that imitate legitimate brands or companies to steal log-in details, one-time passwords or card details.
A cloned site may be trying to collect your card details and OTP, and then use them elsewhere.
An invented shop wants your transfer. A cloned site often wants your card details and your OTP.
Both start with the same mistake: trusting the page instead of checking the address.
4. Read the Address Bar Before You Read the Page
The address bar is the one part of a website the scammer cannot fully control.
ScamShield’s guidance on phishing scams warns about look-alike addresses that swap letters for numbers or add extra segments to imitate a real brand.
Common tricks look like this:
a zero in place of the letter o
an extra word such as “-sale”, “-outlet” or “-official” added to the brand name
the real brand name followed by a different ending, such as an unfamiliar country code
the brand name tucked in at the start of a long address that actually belongs to someone else
a shortened link that hides the destination until you tap
Ask:
Is this exactly the address I would expect for this brand?
Does the part just before the first single slash match the brand’s known website?
Did I compare it against the address I find by searching the brand myself?
There is a local twist too.
The CASE and CCCS advisory on online consumer transactions (2 September 2021) warned that “sg” in a web address does not necessarily mean the retailer is based in Singapore.
A domain ending in .sg, or a name with “SG” in it, is a marketing choice.
The safest habit comes from that 2022 joint advisory: do not tap links in promotional emails or messages, and type the shop’s address into your browser yourself.
If you have to tap a link to find the deal, find the shop another way first.
5. The Padlock Means Private, Not Honest
Most official advice tells you to look for a padlock icon and “https” before entering personal details.
But the padlock is often misunderstood.
The CASE and CCCS advisory describes the padlock as a sign that the connection is encrypted.
Encryption protects the conversation between your phone and the website.
It does not tell you who is on the other end.
A fake online shop can have a padlock too.
The padlock is the lock on the door. It does not tell you whose house it is.
6. Too-Good Prices and the Countdown Clock
The 2022 joint advisory put it simply: if a price seems far too low, it is likely a scam.
ScamShield’s e-commerce scam page lists prices that are very low for a limited time as a warning sign.
The low price makes you want it.
The countdown stops you from checking.
Examples:
a branded item at a fraction of its normal price “for today only”
a timer counting down beside the buy button
a “only 3 left” label that never seems to change
a sale on items that are sold out everywhere else
“pre-order now, ships in a few months”
That last one deserves attention.
ScamShield’s E-Commerce Scams Situation Report for the first half of 2026 says Pokémon trading cards were the top item in e-commerce scam cases, driven mainly by pre-order scams in which buyers paid a deposit or full amount for delivery months later.
The report says those deals were often advertised on Carousell rather than on standalone websites.
But the trick is the same anywhere.
A long wait between paying and receiving gives a scammer time to disappear.
Wah, so cheap is a feeling.
It is not a reason.
The bigger the discount, the bigger the check.
7. Who Is Behind the Site?
A real business can be found.
A fake shop prefers to stay vague.
The CASE and CCCS advisory suggests several checks that cost nothing.
If the site claims to be a Singapore company, look the name up on the Bizfile portal run by ACRA.
Check whether the address and contact details on the website match the business it claims to be.
Check that refund or complaint contacts, such as hotlines and emails, are real, because some sellers give fictitious ones.
Verify any awards or accreditations on the issuing organisation’s own website.
Signs worth noticing:
no company name anywhere, only a shop name
a “contact us” page with a form but no phone number or address
an email address on a free webmail service for a supposedly large brand
a return policy that is missing, vague or says refunds are “at our discretion”
Ask:
Can I find this business anywhere other than its own website?
Does the registered name match the shop name?
If I had a problem, who exactly would I call?
The CASE and CCCS advisory adds one more point.
CASE can help with unfair practices by retailers that have a presence in Singapore, but refunds from overseas retailers with no local presence may be difficult to obtain.
8. The Payment Page Tells the Truth
A fake online shop can copy everything except the way it takes money.
The 2022 joint advisory recommended payment methods with buyer protection, official payment methods or cash on delivery, and warned against advance payments and direct bank transfers, which offer no protection.
A direct bank transfer or PayNow payment to a personal account is hard to reverse once sent.
The SPF brief describes e-commerce scams in which victims were asked to pay a full amount or deposit by PayNow or bank transfer, and only realised the problem when the item never came.
Card payments work differently.
If you paid by card and something goes wrong, the CASE and CCCS advisory says you can raise a dispute with your bank and ask the card issuer about a chargeback.
Red flags at checkout:
the only option is a bank transfer or PayNow to an individual’s name
you are asked to send a payment screenshot by chat to “confirm the order”
the card page asks for your OTP in a box on the shop’s own page
the shop asks for extra delivery, customs or “insurance” fees after you have paid
ScamShield’s e-commerce page lists requests for extra customs or delivery fees after the deal is confirmed as a warning sign.
The SPF brief adds a quieter rule for card payments: read the notification before entering an OTP or approving a digital token, and be clear about what you are approving.
Never type an OTP into a box because a shop asked for it. Read what the OTP is for first.
9. Where the Marketplace Ratings Stop
Singapore has a useful tool for comparing shopping platforms.
The Ministry of Home Affairs (MHA) E-commerce Marketplace Transaction Safety Ratings, last updated 4 March 2026 according to the page, give four ticks to Amazon, Lazada, Shopee and TikTok Shop, two ticks to Carousell and one tick to Facebook Marketplace.
The ratings look at seller identity checks, fraud monitoring, secure payment, transaction records and reporting and dispute tools, along with the number of scam reports.
But notice the word “marketplace”.
The ratings cover marketplaces.
A standalone shop website is not on that list.
When you buy from an independent website, there is no platform in the middle holding your payment, checking the seller’s identity or running a dispute process.
You are the safety system.
This does not make independent shops risky, and many genuine brands sell through their own websites. It just means the checks a four-tick platform does for you, you now do yourself.
Ask:
Is there a platform between me and this seller, or is it just me and them?
If this is a known brand, is it also listed on a marketplace I already use?
Would I be calmer buying the same item through a route with buyer protection?
10. ScamShield Check Tools: What They Can and Cannot Tell You
ScamShield is a Government scam-prevention toolkit.
It includes an app, a 24/7 helpline on 1799, a website at scamshield.gov.sg, and alert channels.
GovTech’s description of the app says it can check suspicious messages, links and numbers, and can also check suspicious calls and websites.
ScamShield’s user guide explains how to check a website link.
Open the app.
Tap “Check for scams”, then “Start Check”.
Choose the website link option.
Paste the link and tap “Check”.
The guide describes three kinds of result.
“Beware, this looks like a scam”: the app sends a scam report automatically.
“This is not a verified link”: the site is likely not an official government, bank or hospital website.
“This link looks safe”: official government, bank and hospital sites get this result.
That middle result needs careful reading.
Most genuine shops are not government, bank or hospital websites.
So a real shop may also show as “not verified”. It simply means the app does not recognise the site as one of the official sites it verifies.
The guide also says that if you find a “not verified” site suspicious, you can choose to report it, and authorities review reports and block suspicious links.
A scam warning from ScamShield is a strong reason to stop. A “not verified” result is a reason to keep checking, not a reason to relax.
If you are unsure, call 1799.
The helpline is there to help you decide whether something is a scam before you act.
11. The Singapore Layer
The size of the problem first.
The SPF Annual Scam and Cybercrime Brief 2025 says e-commerce scams fell 42.5% to 6,703 cases in 2025, but still had the most cases of any scam type.
Total scam losses in 2025 were about S$913.1 million.
Phishing scams, where victims enter card details and OTPs on fake pages or give them to scammers, made up 6,264 cases with about S$39.9 million lost.
ScamShield’s report for the first half of 2026, published on 24 August 2026, says e-commerce scam cases rose 19.3% to 3,865 compared with the same period in 2025.
It also notes that “other websites” had relatively high losses despite fewer cases.
Now the local tools.
The ScamShield app and the 1799 helpline, for checking before you pay.
The Bizfile portal by ACRA, for checking a claimed Singapore company.
Your bank’s transaction alerts and limits, and its emergency “kill switch”, which ScamShield encourages you to set up and know how to use.
Money Lock, offered by banks, which ScamShield describes as a way to secure part of your savings.
The police’s online report e-service, which covers scams.
CASE, for disputes with genuine retailers that have a Singapore presence.
A festive hamper deal shared in the condo group chat deserves the same checks as any advert.
This guide is general information, not legal or financial advice.
For your specific case, check the official source or speak to your bank.
12. Strong Signs and Weak Signs on a Shopping Website
Strong signs:
the address matches the brand’s known website exactly
you reached the site by typing the address or from the brand’s verified social account
the business name matches a registered company you can look up
a physical address, phone number and email that work and belong to the business
prices are in line with other reputable retailers
clear delivery times, return terms and warranty, shown before payment
card payment through a recognised checkout, or a platform with buyer protection
Weak signs:
the address is a near-miss of a famous brand
you only found the site through an unsolicited advert, message or link
the discount is dramatic and the timer is loud
no company name, only a shop name and a contact form
the only payment option is a transfer or PayNow to a personal account
the checkout asks for an OTP in a box on the shop’s page
new fees appear after you have paid
Logos, photos and reviews are cheap to fake. A registered company, a matching domain and a protected payment route are not.
13. Practical Method: The Five-Minute Website Check
This method works for any shop website you have not bought from before.
1. Close the link and search the shop yourself
Do not use the link from the advert or message.
Search for the brand or shop name in your browser.
If it differs from the link you were sent, trust the one you found yourself.
2. Read the address bar slowly
Look for swapped letters, extra words and unfamiliar endings.
Check for the padlock, then remember it only means the connection is private.
3. Find the business behind the shop
Look for a company name, address and phone number.
If it claims to be a Singapore business, look it up on Bizfile.
If you cannot find the business anywhere except its own website, stop here.
4. Check the price against the market
Compare with the brand’s own site and two other reputable retailers.
If the gap is huge, ask why.
5. Run the link through ScamShield
Paste the link into the ScamShield app’s website check.
A scam warning means stop.
A “not verified” result means continue your own checks.
If you are still unsure, call 1799.
6. Look at the payment options before you add to cart
Prefer card payments through a recognised checkout, or a route with buyer protection.
Be very cautious if the only option is a transfer to an individual.
7. Keep records as you go
Screenshot the product page, the price, the address bar and the order confirmation.
If something goes wrong later, these become evidence.
14. If You Already Paid: The First Hour
Sometimes the doubt arrives after the money has gone.
The tracking number does not work.
The shop stops replying.
ScamShield’s “I’ve been scammed” page sets out the first steps.
1. Call your bank immediately
If your bank account or card is involved, contact your bank straight away so it can act to prevent further losses.
If you entered your card details or OTP on the site, tell the bank that too.
If you suspect your banking access is compromised, ScamShield says you can use your bank’s emergency self-service “kill switch” to suspend your account.
2. Make a police report
You can report online through the police’s e-service for crimes that do not need immediate police action, such as a scam.
You can also report in person at a Neighbourhood Police Centre or Neighbourhood Police Post.
Call 999 only if you need urgent police help.
Include as much detail as you can: the website address, payment details, account numbers, chat records and screenshots.
3. Report it through ScamShield
ScamShield recommends reporting scams through the ScamShield app.
4. Watch for a second wave
ScamShield warns that scammers may target past victims again, sometimes posing as police or other authorities.
Anyone who calls promising to “recover” your money for a fee should be treated with suspicion.
In the first hour, your bank comes before your embarrassment. Call first, feel later.
15. After the First Hour: Disputes, Frameworks and Honest Expectations
Once the urgent steps are done, work out which route fits what happened: card or transfer, authorised or not, fake shop or real shop behaving badly.
If you paid by card for goods that never came, ask your card issuer about a dispute or chargeback.
The CASE and CCCS advisory mentions this route for card payments.
If you were tricked into entering your card details and OTP on a fake page, and unauthorised transactions followed, that looks more like phishing.
The Shared Responsibility Framework by MAS and IMDA, in effect since 16 December 2024, sets duties for banks and telcos in relation to phishing scams, with expectations of payouts where they breach those duties.
Whether a particular case falls within it depends on the facts, so ask your bank and read the framework itself.
If you knowingly sent a transfer to a fake shop, recovery is harder.
Fast reporting gives the bank and police the best chance to act.
If the shop turns out to be a real business that simply treated you badly, such as late delivery, wrong goods or a refusal to refund, that is a consumer dispute rather than a scam.
CASE can help with unfair practices by retailers with a Singapore presence.
Final Summary
A fake online shop is a stage set.
It copies what is cheap to copy: logos, photos, reviews and a countdown timer.
It struggles with what is expensive to fake: a matching domain, a registered business, real contact details and a protected payment route.
A common way in is a link you did not go looking for.
If you have already paid, call your bank first, make a police report, report through ScamShield and watch for follow-up scams.
On an independent website, you are the first check.
So the smartest question is not:
“Does this shop look real?”
It is:
“If I could not see the logo, would I still trust where my money is going?”
Simple Checklist
Before paying on an unfamiliar shopping website, ask:
- Did I reach this site by typing the address myself, not by tapping an advert or message?
- Does the address match the brand’s known website exactly?
- Is there a padlock, and do I remember that it only means the connection is private?
- Can I find a company name, address and phone number that match a real business?
- If it claims to be a Singapore company, did I check it on Bizfile?
- Is the price in line with reputable retailers, not dramatically lower?
- Did I check the link in the ScamShield app or call 1799?
- Is there a payment option with protection, rather than only a transfer to a person?
- Will I read any OTP or approval notification carefully before acting?
- Have I screenshotted the product page, price, address and order confirmation?
If the answer is unclear, pause.
Close the tab, search the shop yourself, and look again.
Where the Facts Come From
Singapore Police Force – Annual Scam and Cybercrime Brief 2025
ScamShield – E-Commerce Scams Situation Report 1H 2026
SPF and CSA – Joint Advisory on Scams Targeting Year-End Online Shopping and Festivities (2 December 2022)
ScamShield – E-Commerce Scams
ScamShield – Phishing Scams
ScamShield – Transact Securely
ScamShield Guide – How to Check a Website Link
GovTech – ScamShield Suite
ScamShield – I’ve Been Scammed
Singapore Police Force – Lodge a Police Report (e-service)
CCS – CASE and CCCS Advisory on Online Consumer Transactions (2 September 2021)
MHA – E-commerce Marketplace Transaction Safety Ratings
CSA – Go Safe Online Tips and Resources
MAS – MAS and IMDA Announce Implementation of Shared Responsibility Framework
Prices, rules and platform features change. We last checked this page on 18 October 2026. General information, not financial, legal or medical advice.
Continue Reading
How Shopping Works | Shopping Scams in Singapore
How Shopping Works | The Big Picture
How Shopping Works | Online Shopping in Singapore, From Search Bar to Doorstep
How Shopping Works | Shopee, Lazada, Amazon, TikTok Shop and Carousell Compared
Scammed Through a Phishing Link? How the Shared Responsibility Framework Works
Your Consumer Rights: The Lemon Law, Refunds and Unfair Practices
fake online shop, fake shopping website, how to check a website before paying, cloned brand website, online shopping scam Singapore, e-commerce scam Singapore, phishing website, look-alike domain, check website address, too good to be true deals, pre-order scam, ScamShield app, ScamShield check link, ScamShield helpline 1799, Bizfile company check, CASE online shopping advice, safe payment online Singapore, PayNow scam, bank transfer scam, card chargeback Singapore, OTP scam, what to do if scammed Singapore, police report scam online, Shared Responsibility Framework, MHA transaction safety ratings, SPF scam brief 2025, smart shopping Singapore, how shopping works, Singapore shopper guide, wahliao shopping guide
