In short and in plain language
Before Black Friday there are many fake shops on the internet. They look real. But after you pay, nothing arrives.
Watch out for warning signs. You must send money first. The price is far too low. The firm has no address. A clock tells you to hurry.
It is better to pay after the goods arrive. Or let the shop take the money from your account. Then it is easier to get it back.
If your money is gone, call your bank at once. Keep all your papers. Tell the police about the fraud.
We are happy to practise this with you. We come to your home.
In the week before Black Friday on 27 November 2026, many retailers run a Black Week, and Cyber Monday follows on 30 November. Anyone ordering presents, a new tablet or firewood for the winter online right now will find genuine discounts, but also shops that exist only to collect money. By November 2025, the consumer centres' Fakeshop-Finder had already detected 86,000 fake online shops (Verbraucherzentrale NRW). And in October 2026, the consumer centres' warning list shows numerous offers for firewood, pellets and heating oil. This article shows you five warning signs that give away a fake shop before you order, a checklist for the minutes before you click the order button, the payment methods that let you get your money back if things go wrong, and the first steps to take if it has already happened.
Key takeaways
- By November 2025, the consumer centres' Fakeshop-Finder had detected 86,000 fake shops, with around 1,200 more added every month (Verbraucherzentrale NRW). With Black Friday on 27 November 2026, a careful look pays off twice.
- Five warning signs carry the first check: prepayment only at checkout, a price far below the market, a missing or false legal notice, a new or slightly altered web address, and time pressure from countdowns or low-stock bars.
- Before ordering, read the web address letter by letter, check the legal notice, compare the price in at least two price comparison sites (Verbraucherzentrale) and enter the shop address into the free Fakeshop-Finder.
- Choose invoice or direct debit: a SEPA direct debit can be reclaimed without giving reasons within eight weeks of the debit (Section 675x BGB). A prepaid bank transfer can only be stopped for hours or seconds, depending on the bank.
- During the heating season, consumer centres and police warn of fake shops for firewood, pellets and heating oil. Order fuel from local dealers you can phone or visit wherever possible.
- If the money is gone: call your bank at once, save the order confirmation, emails and screenshots, and report it to the police, which also works online. Only 32 per cent of the previous year's online crime victims filed a police report (Cybersicherheitsmonitor 2026).
Why fake shops peak before Black Week
The discount days around Black Friday are a major event for retail. For Black Friday and Cyber Monday 2025, the German Retail Federation expected sales of 5.8 billion euros (HDE). For the accompanying survey, IFH Köln questioned more than 1,000 online shoppers on the federation's behalf in October 2025 (HDE). 48 per cent of them planned to go bargain hunting on Black Friday, and 54 per cent wanted to use the day for Christmas shopping as well (HDE). When so many people are hunting for deals at the same time, one more shop with a dream price hardly stands out.
Shopping online has long been part of everyday life for most people: 85 per cent of internet users aged 16 to 74 in Germany shopped online in the twelve months before the 2025 survey (Destatis). That means a great many people can run into a fake shop. In the Cybersicherheitsmonitor 2026, a representative survey by the Federal Office for Information Security (BSI) and the German police crime prevention programme (ProPK), 11 per cent of respondents said they had been affected by a crime on the internet in the past twelve months (Cybersicherheitsmonitor 2026). In January 2026, 3,060 people aged 16 and over were surveyed nationwide (Cybersicherheitsmonitor 2026).
Among those affected, 22 per cent named fraud when shopping online, more often than unauthorised access to accounts, online banking fraud or phishing (Cybersicherheitsmonitor 2026). The consumer centre of North Rhine-Westphalia sees the same trend from the other side. By 20 November 2025, its Fakeshop-Finder, a free checking tool of the German consumer centres, had detected 86,000 fake online shops, and according to the centre, around 1,200 new ones are added every month (Verbraucherzentrale NRW). Every day, consumers enter about 13,000 queries into the tool's search (Verbraucherzentrale NRW). These figures reflect the position as of November 2025, whereas the warning list at warnung.fakeshop-finder.de is updated continuously.
Fake shops are just one scam among many. Fake bank emails, parcel text messages and calls from supposed bank staff are covered in our guide on spotting phishing and fake calls. This article is about the moment before: you have found an offer and are wondering whether to order.
How fake shops work
A fake shop is a website set up for one purpose only: getting you to pay. Afterwards nothing is delivered, or you receive poor-quality goods at an inflated price. The consumer centres also describe operators faking delivery problems after payment and stringing customers along so that they do not take further steps (Verbraucherzentrale). Every day that passes this way makes it harder to get a payment back.
Setting one up costs the criminals very little. A shop template can be saved and reused under a new address with a few clicks. If a domain is blocked, the next shop appears under another address, and if the site runs on a server abroad, German authorities can often barely act against the operators, according to the consumer centres. A complete list of all fake shops therefore cannot exist.
Artificial intelligence adds to this. According to the police, it can be used to build shops with a polished layout and cleanly worded legal texts in next to no time (Polizeiliche Kriminalprävention). The consumer centre of Lower Saxony points out that an authentic-looking logo and a convincing product description are quick to produce today. The old rule of thumb that clumsy German gives a scam away no longer holds on its own. Spelling mistakes remain a clue, but their absence is no all-clear.
Annoying retailer or fake shop?
Five warning signs before you click order
No single feature proves a fake shop, and some fakes are very well made. But if several of the following signs come together, do not order. The order matches the markers in the graphic above.
1. At checkout, only prepayment is left
A typical pattern: the shop first shows several payment methods, such as invoice, direct debit or credit card. Only at the last step of the order is a bank transfer in advance the sole option left (Verbraucherzentrale). For heating oil shops, the consumer centre also lists payment in cryptocurrency as a warning sign alongside prepaid transfers. Under Section 312j (1) BGB, a reputable retailer must state clearly which means of payment it accepts at the latest when the ordering process begins. If payment methods vanish on the way to the checkout, that is a clear signal.
The difference matters to you because a bank transfer can only be stopped for a short time. How long depends, according to the consumer centres, on the time of day, the day of the week and your bank's practice: sometimes a few hours, sometimes only a few seconds (Verbraucherzentrale). With an instant transfer, the money reaches the recipient within seconds anyway.
2. The price is far below the market
A fake shop lures you with the price. The police describe the typical pattern: popular products such as the latest games console, the current smartphone or designer fashion at particularly low prices, often just when they are sold out elsewhere (Polizeiliche Kriminalprävention). Not every cheap shop is a fake shop, and not every fake shop is extremely cheap. But if conspicuously low prices pile up, it is worth a closer look.
So compare the price before you buy. The consumer centres recommend using at least two price comparison sites, because, according to tests, no single price comparison site beats all the others (Verbraucherzentrale). If one shop is well below all the others, that is not a lucky find but a reason for caution. A second check is struck-through prices. If a retailer advertises a reduction of its own price, Section 11 (1) PAngV requires it to state the lowest total price it charged in the 30 days before the reduction (Section 11 PAngV). According to the consumer centres, comparisons with the manufacturer's recommended retail price, which has a reputation for being inflated, are not covered. A missing lowest price on a supposedly reduced item does not prove fraud, but it shows that the seller is not too particular about the rules.
3. The legal notice is missing or does not hold up
Anyone running an online shop on a commercial basis must, under Section 5 DDG, keep certain details easy to find and permanently available, including name and address, for legal entities such as a GmbH also the legal form and the authorised representative, an email address and, where applicable, the commercial register and registration number. According to the consumer centres, this legal notice obligation also applies to foreign shops that target customers in Germany. A shop without a legal notice is therefore ruled out (Verbraucherzentrale).
A legal notice on the page proves nothing, though. Fake shops copy the addresses of real companies that have nothing to do with the fraud and are victims themselves. So check three things: does the address exist, and can the company be found there on a map service? Can a stated commercial register number be found in the federal states' joint register portal at handelsregister.de, and does the company name match? And is there a phone number where someone actually answers? The Fakeshop-Finder also scans shops for features such as a forged VAT identification number, which the consumer centre of North Rhine-Westphalia describes as typical of dubious sellers (Verbraucherzentrale NRW).
Click on trust seals
4. The web address is new or slightly altered
Read the web address letter by letter. Fake shops often change the address of a well-known shop only minimally, for example by swapping a letter or adding an extra ending such as .de.com where only .de should be (Verbraucherzentrale). An address that does not match the offer should also make you suspicious, for example a garden shop name under which shoes are suddenly being sold.
Another clue is the age of the domain. Because fake shops are often deleted and rebuilt under new addresses, they very frequently have short lifetimes. The Fakeshop-Finder therefore shows how long a domain has existed and classifies up to six months as a relatively new website (Verbraucherzentrale). A new domain alone proves nothing, as every reputable retailer starts somewhere. Combined with prepayment and a dream price, though, it paints a clear picture.
The padlock symbol in the address bar does not help with this question. It shows that the connection between your device and the shop is encrypted. That matters when you enter payment details, but it says nothing about who is at the other end, because fake shops use encrypted connections too.
5. Countdowns, low stock, time pressure
Running clocks and shrinking bars for supposed stock levels are meant to create pressure. The consumer centres point out that such a bar does not show how many items are really available, and advise checking an offer calmly despite the countdown (Verbraucherzentrale). Good deals come back, lost money usually does not.
The police sum this up in the SHS rule of the Initiative für sicheres Handeln: Stop when an offer puts you under pressure or sounds too good to be true. Question whether the shop is reputable, for instance by searching for other people's experiences. Protect yourself and others by reporting suspicious offers (Polizeiliche Kriminalprävention). During Black Week, however, genuine retailers use countdowns too. The warning sign is therefore the combination: a countdown at a well-known retailer that offers invoice payment is a sales trick, a countdown at an unknown shop that wants prepayment is a reason to close the window.
The checklist before you order
With an unknown shop, the following steps take a few minutes. With retailers you have ordered from several times before, a look at the web address is usually enough. Print the list or keep it next to your computer when you order during Black Week.
- Check the address: does the address bar show exactly the shop you mean? Look out for typos, extra hyphens and endings such as .de.com.
- Ask the Fakeshop-Finder: enter the address on the consumer centres' Fakeshop-Finder page. Red stands for a warning, yellow for look more closely, green for nothing conspicuous so far.
- Open the legal notice: are the address, authorised representative, email address and, where applicable, register number given? Check the address on a map service and the register number at handelsregister.de.
- Look for experiences: enter the shop name together with words such as Erfahrung (experience) or Bewertung (review) into a search engine. Lots of praise in the shop and warnings elsewhere do not fit together.
- Follow the payment methods to the end: can you still choose invoice or direct debit right up to the order button?
- Compare the price: if it is far below every other offer in several price comparison sites, do not order.
- Read the order button: under Section 312j (3) BGB it must be labelled with the words zahlungspflichtig bestellen (order with obligation to pay) or an equally clear wording.
- Keep records: save a screenshot of the offer, the order confirmation and the emails until the goods have arrived in full.
A green result in the Fakeshop-Finder is no free pass. The consumer centres advise choosing a safe payment method even then and checking the return conditions before ordering. Conversely, a yellow result does not automatically mean fraud: yellow means that the shop is neither on a warning list nor on a list of trustworthy shops and that at least one feature looks the way it often does with fake shops. Sometimes the tool fails to find an existing legal notice, in which case check it yourself.
Paying safely: what you can get back
The payment method decides whether you see your money again if things go wrong. In their checklist, the BSI and the police crime prevention programme recommend buying on invoice or by direct debit, because these offer better options for reversing a payment in a fraud case, and payment methods with effective buyer protection (BSI and ProPK). The police also explicitly advise against paying with voucher, gift or prepaid cards or through cash transfer services (Polizeiliche Kriminalprävention).
| Payment method | If the shop does not deliver | Verdict for unknown shops |
|---|---|---|
| Buy on invoice | You pay only after the goods arrive. If nothing comes, you pay nothing. | the obvious choice |
| SEPA direct debit | Refund without giving reasons via your bank, within eight weeks of the debit (Section 675x BGB) | good, if it is offered right up to the order button |
| Credit card | Request a chargeback from the card-issuing bank, its terms set out the procedure and deadlines | usable, check your statement closely afterwards |
| Payment service with buyer protection | Report the case to the service, scope and deadlines depend on its buyer protection | usable, read the terms beforehand |
| Bank transfer as prepayment | can only be stopped for a few hours or a few seconds, depending on the bank (Verbraucherzentrale) | avoid |
| Voucher cards, cryptocurrency, cash transfer | hardly recoverable | unsuitable for online shopping |
With credit cards and payment services, a lot depends on the terms of the provider in question. Read them before you order from an unknown shop for the first time, not afterwards. For direct debit, on the other hand, the law applies: with a SEPA core direct debit you can demand a refund without giving reasons, but you must claim it from your bank within eight weeks of the debit (Section 675x BGB). So when you order during Black Week, make a note of when the money was taken.
For bank transfers, your bank checks before release whether the payee's name and IBAN match. If the name the shop gives as the payee differs from the actual account holder, you will see a notice before you confirm. Cancel the payment in that case. The IBAN's country code, its first two letters, also tells you something: if the shop's legal notice says it is based in Germany but the account is in another country, be careful. How the name check works in detail is explained in our article on payee verification in online banking.
Withdrawal only helps with real retailers
Marketplaces and adverts on social networks
Online shopping fraud does not only happen in standalone shops. According to the checklist by the BSI and ProPK, it can occur at larger online shops just as well as on classified ad portals and in the shops of social media platforms (BSI and ProPK). On the marketplaces of large sales platforms, the consumer centres have repeatedly come across offers where customers were asked to pay in advance and did not receive the goods. So stick to the platform's own payment route and do not agree to a bank transfer outside it, even if the seller offers a discount for doing so.
Adverts on social networks call for particular caution. The consumer centre of North Rhine-Westphalia observes that fake shops are deliberately spread through paid advertising, often immediately after a new domain goes live and before they appear in search results. In October 2025, it therefore added a module to the Fakeshop-Finder that scans adverts on large social networks for typical keywords (Verbraucherzentrale NRW). Do not click straight through from an advert to the order button, but check the shop first like any other.
If you spot a fake shop on a platform, report it to the operator using its reporting function. If you paid through a payment service provider, the consumer centres advise reporting the shop there immediately as well. Every report helps stop others from falling for the same site.
Heating oil, pellets, firewood: take care in the heating season
Before Black Week comes the heating season, and it attracts fake shops too. Back in October 2025, the consumer centre of Lower Saxony warned of an increase in fake shops for wood, pellets and heating oil. In spring it is usually e-bikes, in autumn often heating fuel, as its legal expert put it:
It is part of fraudsters' business model to exploit seasonal demand.
Autumn 2026 looks similar. In early October 2026, the consumer centres' warning list at warnung.fakeshop-finder.de featured numerous shops offering firewood, wood pellets or heating oil. We deliberately do not name any here, because fake shops change their addresses quickly: a list made today is out of date tomorrow. Instead, check every unknown fuel dealer before ordering, using the steps above.
The consumer centre explains why the scam works so well with heating oil: many people only notice when temperatures drop that the tank is not full, and end up under time pressure (Verbraucherzentrale). Typical warning signs at fuel shops are prices well below market level, goods that only this shop can still supply while they are sold out elsewhere, and payment exclusively by prepayment or cryptocurrency. The police, too, explicitly count firewood, wood pellets and heating oil among the seasonal goods in high demand that fraudsters offer on temptingly cheap terms (Polizeiliche Kriminalprävention).
With fuel, you have an advantage that you rarely have with presents: there are dealers nearby. A local firewood or heating oil dealer whom you can phone and whose yard you can visit if need be is hard to fake. Ask friends and neighbours who they have been ordering from for years, and with a new dealer, pay after delivery if you can. If you would like to manage your consumption better over the winter, we can help with smart heating control.
If the money is gone: the first steps
If it has happened, speed matters, not shame. Fake shops are built so that careful people fall for them too. Work through the following steps on the same day if possible, and the first two immediately.
- Call your bank: for a transfer, ask whether it can still be stopped, for a direct debit, demand a refund. Use a phone number you know yourself, for example from your banking app or your account documents.
- Inform the payment service: if you paid by credit card or through a payment service, report the case there immediately and have the transaction stopped.
- Secure evidence: save the order confirmation, invoice, emails, bank statement and screenshots of the offer, ideally printed out as well.
- Report it to the police: at your local police station or online through your federal state's online police station, in Lower Saxony through the Onlinewache of the Lower Saxony police.
- Secure your accounts: if you created a customer account at the shop with a password you also use elsewhere, change it there straight away.
- Watch your account: if you entered card details, look out for unknown debits over the following weeks and report them at once.
Many victims do not report the crime. In the Cybersicherheitsmonitor 2026, only 32 per cent of those affected by online crime in the twelve months before the survey said they had filed a police report (Cybersicherheitsmonitor 2026). Yet the BSI and the police stress in their checklist that only this route can push forward measures such as taking fake shops offline. The consumer centres also offer to check the collected documents at one of their advice centres. And the damage is often real: a third of these victims reported financial losses (Cybersicherheitsmonitor 2026).
If you used a password for the order that you also use elsewhere, that is a good reason to switch to passkeys. Our article on setting up passkeys shows how. And because order confirmations, invoices and password links arrive by email, it is worth looking at your inbox too: secure your email account.
Practise together: shopping safely with Technik daheim
Technik daheim is not a shop checking service and cannot make the decision for you in an individual case. But we come to your home in the Hildesheim area and the Leine valley and practise what this article describes on your own device. The online banking course covers safe transfers, recognising your bank's genuine website and staying calm with messages that push you to act immediately. In the computer course, spotting dubious websites is part of the programme, and you can let us know in advance about topics you would like to cover, such as checking a shop. If you mostly shop on your phone, the smartphone course helps you judge suspicious messages and alerts correctly.
The data protection course covers secure passwords, a password manager and two-factor sign-in for your important accounts, so that a single bad purchase does not put further accounts at risk. We explain all this patiently and without jargon to older relatives, see the page tech help for seniors. If you are planning to give devices as presents during Black Week, you will find tips in the article gifting technology and setting it up first. You can arrange an appointment through the contact form for a home visit.
Related Articles
Set up passkeys: how to sign in without a password
Set up passkeys step by step: where the key is stored, how signing in on a PC works with your smartphone and what to do if your device is lost or stolen.
Stop nuisance and scam calls: setting up call blocking
Set up call blocking on your router, DECT phone and mobile: reject anonymous calls, block numbers, silence unknown callers and report nuisance calls properly.
Smart Door Locks: Choosing and Setting Up Safely
Choosing a smart door lock safely: what the test really shows, which criteria matter in 2026 and why mechanics stay the foundation - set up near Hildesheim.