High riskFake checkout-page campaign — cloned TikTok Shop flow
Fake “TikTok Shop” checkout pages (phishing sites, rotating domains)
Registration profilePhishing domains registered for the campaign and rotated as they are reported — the pages are clones, not long-standing stores
First seen2025–2026, in phishing links distributed by email and text
Evidence
- Sites replicate the TikTok Shop checkout flow — the logo, the layout, the payment step — so a shopper believes they are paying TikTok.
- Distributed through phishing links sent by email and text, with increasingly sophisticated versions sending fake order-confirmation emails afterward.
- Real TikTok Shop transactions happen within the TikTok app — TikTok processes the payment through its own logistics and payment network; there is no separate website checkout.
- Any “TikTok Shop” link asking you to enter payment information outside the app is a phishing page harvesting card details.