Fake Shopping Websites and Phishing Attacks Spiking Ahead of Black Friday
Ahead of Black Friday, NordVPN researchers have found a 250% spike in fake shopping websites, including Amazon and eBay impersonations, some fueled by AI technology.
Written by Jackie Leavitt (Editor at Large)
Reviewed by Aleksander Hougen (Chief Editor)
Last Updated:
With massive Black Friday deals taking over the internet weeks or months ahead of the big day, NordVPN researchers have seen big spikes in online shopping scams.
Beyond the 250% increase in general fake shopping sites, those researchers have found impersonations of Amazon and eBay spike by 232% and 525%, respectively. Additionally, between August and October 2025, phishing attacks increased by 36%.
“Shopping events like Black Friday are a goldmine for cybercriminals,” said Marijus Briedis, CTO at NordVPN. “Scammers exploit the frenzy around doorbuster deals and flash sales, knowing that rushed shoppers are more likely to click on malicious links or share personal information without thinking twice.”
According to NordVPN’s National Privacy Test, 68% of global consumers don’t have the necessary knowledge to help identify phishing websites.
AI software is also making detection of scams more difficult because AI chat tools and image or video creators can help mimic brand tone, generate large numbers of reviews, and even impersonate legitimate company employees — you can read our recent news article about AI scams to learn how to better identify them.
Throughout the holiday season — and beyond — online shoppers should be aware of these common scams:
- Online Black Friday ads or email deals that look official; shoppers could make a purchase for products or travel plans that don’t exist or that are counterfeit
- Fake delivery emails or text messages claiming an issue with delivery, asking them to resolve it by clicking a link or paying a small fee.
- Fake order scams that confirm a “shipment” that never occurred or note a “billing error,” getting recipients to click a link to resolve the issue — leading to a phishing site.
If you see an online ad or receive a suspicious email, the best thing to do is contact the provider directly — either through customer service to discuss the issue or to the provider’s official website to find the deal; if you can’t find the deal on the official website, then it doesn’t exist.
If you found this article helpful, you might be interested in subscribing to our newsletter to get more useful information, tips and deep dives into important and timely topics.