DoppelCart Scam Alert: 119,000 Fake Shopping Websites Target Online Shoppers

New Delhi: Online shopping has made shopping very easy. From clothes, electronics to everyday items, one can order from home in just a few clicks. But cybercriminals are also taking advantage of this facility. German cyber security company Nebty has detected a large fake online store network named DoppelCart. According to the company, about 1.19 lakh domains are connected to this network and more than 44,182 genuine brands have been copied on these websites. Researchers have described it as the largest fake-shop network ever publicly documented, based on the number of domains.

What is DoppelCart and how has its network spread?

Nebty's September 2026 investigation found 118,787 .shop domains associated with this network. However, it has not been confirmed that all these websites are run by the same criminal group. The researchers linked them into clusters based on similar website code, technical infrastructure and other infrastructure signals. According to the report, identical build files were found in 96 percent of the verified DoppelCart stores and these were connected to only 27 e-commerce backends.

Do these fake websites look like real brands?

The biggest feature of DoppelCart is that its websites do not look fake at first glance. In these, product catalogues, photos, logos, product descriptions and other information of real companies are copied. In some cases, fake websites were found loading product images from the servers of the genuine company. According to Nebty, the network has copied 44,182 brands and dozens of clone stores of many popular brands were also found.

How do customers get trapped after seeing huge discounts?

Fake websites resort to big discounts to attract customers. Investigation showed discounts of up to 65 percent on some sites. By seeing such offers on social media or other online mediums, the customer can reach the website directly. The original brand name, the same product photo, and a very low price combine to make the website appear trustworthy.

When does the real risk begin?

According to researchers, the danger is not limited to only receiving counterfeit goods or non-delivery of goods. Some DoppelCart checkout pages were found to be able to collect sensitive information such as card number, expiry date, CVV, cardholder name, email, phone number and address. This data can be sent in real time to servers controlled by the attackers. In some cases, the ability to receive a one-time confirmation code sent by the bank was also seen.

How to stay safe while shopping online?

According to the advice of cybersecurity experts, one should not make purchases on any unknown website just because of big discounts.

• Check the website domain carefully and try to access the store from the brand's official website or app only.
• You can also search for independent reviews and complaints about a new online store before purchasing from it.
• Be especially wary of offers that are unusually low compared to the general market price.
• The most important thing is not to share OTP, banking password or card information with anyone.
• If card details have been posted on any suspicious website, immediately contact the bank and take steps to block or secure the card.
• The DoppelCart case also shows that a website's appearance as a genuine brand does not guarantee that the website is actually from that company.