Black Friday is November 27, 2026 and Cyber Monday is November 30. Scammers prepare weeks ahead: fake stores with too-good prices, delivery texts, cloned ads, QR codes on flyers, and fake "order confirmation" messages. The simplest protection is to never buy through an ad or message link, pay with a method that has dispute rights, and know where to report if you slip. This guide includes what to do in the first hour, and the official reporting channel for each of four countries.
Key takeaways
- Go to the store by typing its address or using your own bookmark, not by tapping an ad, text or QR code.
- A price far below every other shop is the main warning sign. Real discounts exist, but a 90 percent cut on a hot product from a shop you never heard of is not one.
- Fake order and delivery messages work because you really are shopping. Check the order in the retailer's own app or account, never from the message.
- If you paid a scammer, act within the first hour: contact your bank or card issuer, change passwords, then report (steps and links below).
- Recent breaches (Engie in France and the Crime Stoppers tip platform in Canada) show why "they know my details" is not proof a caller is real.
Why this week is a scammer's best week
During a sales event people expect messages about orders, deliveries, refunds and accounts, and they are in a hurry to catch limited-time deals. A fake message that would be ignored in March gets a tap in late November. Scammers also copy real brands because the cost of faking a shop page is small and the payoff is a stolen card number or a payment that never produces goods.
We cover account security for the holidays in a separate checklist (holiday account takeover prevention). This guide is about the scams themselves, what they look like, and what to do when one reaches you.
The six scams to expect
1. The fake store
A professional-looking shop appears in your social feed or search results selling a popular product at a price that no real retailer could match. You pay, and either nothing arrives or a cheap item arrives. Others only exist to harvest your card details.
Checks that take two minutes: look up the exact web address, not the shop name; be suspicious of domains that add words like "outlet", "official" or "sale" to a known brand; search the shop name together with the word "scam" or "reviews" on a site you trust; look for a real company name, address and return policy; and note that a recently created domain is a red flag (you can look up a domain's registration date with a public WHOIS lookup tool). Copied logos and padlock icons prove nothing, since the padlock only means the connection is encrypted.
2. The delivery text
"Your parcel is held, pay a small redelivery fee." The link opens a page that asks for card details. Because most of us have something on the way in November, it lands at the perfect moment. Real carriers do not ask for card payment through an unexpected text link. Our detailed guide is fake delivery text scam: what to do.
3. Deepfake and cloned ads
Video ads that show a celebrity or a well-known presenter "recommending" a deal can be AI-generated or edited. A voice and face that look right are not proof. The test is the same as for shops: leave the ad, search for the brand's own site, and see whether the offer exists there. If the only place you can find it is the ad, assume it is not real.
4. QR codes
A QR code on a flyer, a parking meter or in an email can hide a malicious address. Most phone cameras show the web address before you open it. Read it. If it does not match the brand or it is a link shortener, do not go. A sticker placed over a real QR code is a known trick, so be wary of codes on public surfaces.
Not sure what is wrong? Get a diagnosis first.
Our certified tech can connect remotely, check your software, drivers and backups, and tell you honestly whether the problem needs a hands-on repair.
5. The fake order confirmation or refund
You receive an email, text or phone call about an order you did not place: "Your payment of $499 was processed, call this number to cancel." The goal is to get you to call, install remote-access software, or give card details to "cancel" it. Do not call numbers or open links in the message. Open the retailer's app or type its address yourself and check your order history. If there is no such order, delete the message. Genuine banks and shops will not ask you to transfer money to a "safe account" or to give someone control of your computer.
6. Account takeover bait
Fake "your account is locked" or "confirm your payment method" messages from shops, delivery apps and payment services aim to steal logins. Use the app or a bookmark, turn on two-step verification, and use a unique password per shop. See our holiday checklist for the full setup.
Two recent breaches that make impersonation easier
Scammers like it when real details leak, because a caller who knows your name and contract number sounds legitimate. Two stories from late October 2026 show how it works. We cite them as reported, and details can change.
Engie, France: a partner tool, not Engie's own systems
French energy company Engie told customers that unusual access had been detected in a tool used by its commercial partners for prospecting and selling energy offers. Engie said its internal IT systems were not compromised. According to press reports, the data included names, email addresses, phone numbers and some contract details such as the delivery or metering point reference. Press reports say bank details were not affected. Engie did not say how many customers were affected. Media coverage and the company itself warned about fake "advisers" who might use those real details to push a fake refund or a change of offer. If an unexpected caller claims to be from your energy provider, hang up and call the number printed on your invoice.
Crime Stoppers, Canada: tips exposed through a third-party platform
CBC News reported that more than 1.5 million Canadian tips submitted to Crime Stoppers programs over 25 years were compromised when Navigate360, the U.S. company that manages the tip platform, was hacked. Navigate360 said an unauthorized party obtained copies of some data between November 21, 2025 and March 5, 2026. The Privacy Commissioner of Canada announced an investigation into Navigate360 on October 27, 2026. CBC reported that about 850,000 of the tips contained personal information. These are tips, and we cannot tell from public reporting which belong to tipsters, victims or people named in allegations. The relevance here: when information leaks, scam calls using it can feel convincing. If you have ever used a tip service, be careful with any unexpected call that mentions it. A caller who knows details about you is not proof of identity.
How to shop safely: a short routine
- Start at the store, not the ad. Type the address or use your bookmark. Search "brand + deal" only to compare, then go directly.
- Compare the price. If three well-known retailers sell the product for $400 and a stranger sells it for $90, the stranger is the risk.
- Pay with protection. Credit cards and some wallet services let you dispute a charge. Check your card issuer's current dispute terms. Avoid bank transfers, gift cards, crypto and "friends and family" payment options for shopping.
- Use a virtual or single-use card if your bank offers one for online shopping.
- Keep screenshots of the product page, price, order confirmation and seller details until the item arrives.
- Lock down accounts: unique passwords, two-step verification, and up-to-date apps on your phone and computer.
- Do not shop on public Wi-Fi for anything involving cards, or use your mobile data.
France: the 30-day lowest price rule
France's consumer authority (DGCCRF, via economie.gouv.fr) explains that when a trader announces a price reduction, the reference price must generally be the lowest price the trader applied in the 30 days before the reduction, and that this applies to online and in-store sales, including Black Friday. It is not the manufacturer's recommended price or a competitor's price. A "-60 percent" claim next to a crossed-out price that was only shown that morning is worth questioning. If a shop in France misleads on discounts, DGCCRF's SignalConso service is the route it recommends for reporting trader issues. Rules differ in other countries, so do not assume the same rule applies elsewhere.
What to do in the first hour if you were scammed
Speed matters most for money and logins. Work through this list in order.
- Stop contact. Do not reply, call back or send more money, even if they threaten or promise a refund.
- Call your bank or card issuer using the number on the back of your card. Say you were scammed, ask to block the card, and ask how to dispute the payment. Be quick, because dispute windows can be limited.
- Change passwords on any account where you typed a password on the fake page, starting with email, then banking, then the shop. Turn on two-step verification.
- If you gave someone remote access, disconnect the internet, uninstall the remote tool, run a full security scan, and ask a technician to check the computer. Our remote repair service can review it with you.
- Save evidence: screenshots of messages, the web address, payment receipts, phone numbers and the date and time.
- Report it (see the next section). Reporting does not guarantee money back, but it feeds the data that helps warn others and supports police work.
- Watch your statements for the next weeks, and consider a credit report alert if you shared ID details.
Where to report, by country
| Country | Official channel | Notes |
|---|---|---|
| Canada | Canadian Anti-Fraud Centre: reportcyberandfraud.canada.ca | You can report as a victim or witness, even anonymously. If you paid, the CAFC page says to contact local police as soon as possible, then report online. |
| United States | FTC: ReportFraud.ftc.gov | The FTC takes reports of scams and fraud. Also tell your bank or card issuer first. |
| United Kingdom | Report Fraud: reportfraud.police.uk | It replaced Action Fraud, going live in December 2025. If you live in Scotland, the Report Fraud site says to report via 101 (Police Scotland). |
| France | cybermalveillance.gouv.fr for help; SignalConso (DGCCRF) for trader issues; Signal Spam for spam email; forward scam texts to 33700 | DGCCRF documents 33700 for suspicious SMS and Signal Spam for spam email. For online payment fraud, also tell your bank and consider filing a police complaint. |
We have not listed phone numbers for these agencies because they can change. Use the official websites above. For another Canada-specific scam, see our guide to fake CRA text scams.
Warning signs checklist
- Urgency: "only 3 left", countdown clocks that reset, "pay now or lose your order".
- Payment by gift card, bank transfer, crypto or a "friend" payment.
- A web address that adds words to a known brand or ends in an odd extension.
- Reviews that look copied or all posted on the same day.
- No company name, address or return policy, or a contact form only.
- Messages about orders you did not place.
- A request to install an app, give remote access, or scan a QR code to "verify".
- An offer found only in an ad or message, not on the brand's own site.
When to call a professional
If you typed your password or card number on a suspicious page, installed an app because a message told you to, or gave someone remote access, ask a technician to check the device and accounts. We can do this remotely and explain what we find. Email and bank logins are the highest priority.
FAQ
When are Black Friday and Cyber Monday in 2026?
Black Friday is Friday, November 27, 2026 and Cyber Monday is Monday, November 30, 2026.
How can I tell if an online store is fake?
Check the exact web address, search the shop name with the word scam or reviews on a trusted site, look for a real company name, address and return policy, and compare the price with well-known retailers. A price far below everyone else is the biggest warning sign.
Is it safe to pay by credit card?
Cards generally give you a way to dispute a charge, but terms vary by issuer and country, so check your card's current dispute terms. Avoid gift cards, bank transfers and crypto for shopping.
I paid a fake store. What should I do first?
Contact your bank or card issuer using the number on your card, ask to block the card and dispute the payment, change passwords, save evidence, and report the scam through your country's official channel.
Where do I report a scam in Canada?
Use the Canadian Anti-Fraud Centre online reporting system at reportcyberandfraud.canada.ca. If you paid, contact local police as soon as possible and then report to the CAFC.
What is the 30-day price rule in France?
According to France's consumer authority, a price reduction announcement must generally be based on the lowest price the trader applied during the previous 30 days, online and in store.
Is a caller who knows my details really from my provider?
Not necessarily. Data from breaches can give scammers real names, contract numbers and addresses. Hang up and call the number on your invoice or official app.