Protect Your Shoppers. From Stores That Only Look Like Yours.

A plain summary of who each rule covers, taken from the official page. Not legal advice. Your legal team decides what applies to you.

• How does a fake store hurt the real retailer?

  Shoppers who are cheated by a copy usually blame the brand they thought they were buying from. You see complaints, chargebacks and lost trust, and you lose sales to a site you do not control.

• What is card skimming on a checkout page?

  It is a small piece of malicious code on a payment page that copies card details as a shopper types them and sends them to the attacker. It often enters through a third-party script, such as a widget or an analytics tag. The shopper sees nothing unusual.

• Why are loyalty accounts a target?

  Points, vouchers and saved payment details can be turned into money. Many people reuse passwords, so logins stolen elsewhere often work. Because the accounts feel low risk, takeovers can go unnoticed for a while.

• Does PCI DSS apply if a payment provider handles the cards?

  PCI DSS applies to entities that store, process or transmit cardholder data. How much of it applies to you depends on how your checkout is built, so ask your acquirer or payment provider.

• When should we watch more closely?

  During sale seasons and big campaigns. Criminals time fake stores, ads and account attacks for the days when shoppers are most active, so these are the days to have your monitoring tuned and your takedown process ready.

• Who targets retailers?

  This page lists no threat group, because we name a group only when a government or standards source links it to the sector.

• What are look-alike domains and why do they spike around sales?

  Look-alike domains are copied storefronts on addresses that differ by a letter or a word. They peak around sale periods. Shoppers pay, the order never arrives and they blame your brand. Brandefense finds these fake stores and helps get them removed.

• How can a retailer find out that shopper logins are for sale?

  Stolen and reused passwords are tried against shopper accounts, so leaked logins matter. Dark Web Monitoring alerts you when shopper and staff logins linked to you are offered for sale.

• Does GDPR apply to an online shop?

  GDPR is the EU's main data protection law. It applies to organizations established in the EU that process personal data. It also applies to organizations outside the EU that offer goods or services to people in the EU or monitor their behavior. Your legal team decides what applies to you.

• What can a retailer do about scam ads that use its name?

  Paid ads and social media profiles that use your name send shoppers to fake offers and support scams. Fraudulent ad detection finds scam ads that use your name. The takedown service is a managed service that gets fake domains, accounts, apps and ads removed.