This guide pulls together what Scamwatch, the ACCC and the Queensland Government say, including where to report a scam and what to do first if you have already paid. It describes no live offers and names no shops.
Why fake deals work
Scamwatch describes buying and selling scammers as people who set up fake websites, create fake profiles on real retailer sites and post fake ads and fake reviews. Its list of products commonly used as bait includes toys, BBQs, gym equipment, clothing, shoes and phones. An alert dated 4 December 2024 said scammers were targeting festive-season shoppers, including those looking for Boxing Day sales.
The outcome Scamwatch describes is bleak: you lose your money, no goods arrive and your personal and financial details are compromised. It also says that being caught out can happen to anybody.
Warning signs on the website itself
Scamwatch lists several red flags. An unbelievably low price is the first. A seller with no terms and conditions, ABN or privacy policy is another, and so is a site with only positive reviews or reviews light on detail. Scamwatch suggests searching for independent reviews rather than relying on ones posted on the site itself.
Check the address bar as well. Scamwatch points to multiple dashes or symbols in a domain name, a domain that imitates a business, such as Ap9le, and Australian businesses whose domains do not end in .com or .com.au. It adds that having no contact information is a sign a site is likely a scam, and it names ICANN Lookup as a way to see when a website was registered. A seller’s ABN can be checked on ABN Lookup.
Do not assume the first search result is the real website. Fake warning pop-ups are another trick, and Scamwatch says they can pressure you into acting. Its advice is not to click them and to go to the application directly instead.
Payment methods: a 2017 ACCC statement and current Scamwatch pages
In a statement dated 20 March 2017, the ACCC’s then Deputy Chair said the biggest tip-off is the payment method. Scamwatch’s older guidance, from that same 20 March 2017 ACCC statement, says virtual currencies such as Bitcoin lack the protections of other methods and money cannot be recovered once sent. The statement recommends a secure payment service with an https address and padlock, or a payment provider such as PayPal. Scamwatch’s current pages still list unusual requests: money orders, pre-loaded cards, or payments to several different PayIDs or accounts. A website offering only a single payment option, or asking for gift cards or Bitcoin, is also a warning sign on the current website-scams page.
If you pay by PayID or bank transfer, the name should match the seller. A mismatched account holder name is itself a warning sign. The stakes are high because many payments are instant and, as Scamwatch puts it, it is unlikely you will get your money back. Scamwatch also suggests checking that a shop has a refund or returns policy that sounds fair.
Social media shops and marketplaces
Scamwatch says to be wary of new social media stores selling at very low prices. It also warns that scammers impersonate celebrities to promote products, including AI-generated deepfakes and fake news. Competitions and limited-time offers are among the tactics it lists. Before buying, it suggests checking how long an account has been active, its followers and its activity, since a lack of history, detail and followers can signal a fake profile.
On marketplaces, Scamwatch’s advice is to use payment methods the platform recommends and keep communications inside the platform. For big-ticket items, do not pay before inspecting the product in person.
Scam messages can also arrive by email or text. The Queensland Government says legitimate organisations will never email or text asking for your passwords or financial details. If a link looks suspicious, it advises visiting the company’s official website instead of clicking. It also tells shoppers to use trusted sellers and watch for fake delivery scams.
If you have already paid
Scamwatch’s first step is to contact your bank or card provider immediately and ask them to stop any transactions. It also advises changing passwords on devices and online accounts. The Queensland Government adds that your bank may recommend cancelling and reissuing your cards. IDCARE, the national identity and cyber support service named by Scamwatch, can help you make a free plan to limit the damage. Keep your own devices updated, too, with automatic updates switched on.
How to report
Scamwatch has a form for reporting suspicious contact or activity, and at 9 November 2026, per its report-a-scam page, it says it is testing ways to make reporting quicker so scam websites can be taken down. Scamwatch says quick reports allow it to act swiftly against fake websites. If anyone is in immediate danger, call 000.
Queensland’s page sends different problems to different places. It lists online shopping fraud among the cybercrimes to report to the Australian Cyber Security Centre, and says that if you personally paid up front for goods that never arrived, you can make a complaint to your local police station. The Office of Fair Trading takes reports of pricing and advertising scams, and is the place to complain if you are unsure who to report to.
Frequently asked questions
What is the biggest warning sign of an online shopping scam?
In a 2017 statement the ACCC said the payment method is the biggest tip-off, and Scamwatch currently lists unusual payment methods among the warning signs.
What should I do first if I paid a scammer?
Scamwatch says to contact your bank or card provider immediately and ask them to stop any transactions.
Where do I report a fake online store?
Scamwatch has a form for reporting suspicious contact or activity, and Queensland lists online shopping fraud among cybercrimes to report to the Australian Cyber Security Centre.
Can a professional-looking website still be fake?
Scamwatch says scammers create fake websites and fake reviews, and lists missing terms, ABN or privacy policy and imitation domains as red flags to check.
