In statistics published on July 29, 2026, JC3 (the Japan Cybercrime Control Center) said 9,224 malicious shopping sites were reported in the first half of 2026 (January to June). Asked how they found the site, reporters most often answered "internet search results," which has not changed from earlier years. November is a month of more sales. A site you find by searching for a bargain may be a fake online shop. (Note: this article is based on Japanese sources, and the contact points at the end are for Japan.)
The short answer: showing up near the top of search results is not proof of safety. Before you buy, check three things: (1) go in again from the official site or official app, (2) read the company name, address and contact details, and (3) pause if bank transfer is the only way to pay. If you have already paid, contact the places listed below right away.
What the JC3 statistics show (first half of 2026)
- ▸9,224 reports. That is 3,085 fewer than the 12,309 in the second half of 2025, and less than half the number in the first half of 2025 (JC3). Fewer, but not zero. This counts reports received, not actual losses or number of victims
- ▸"Internet search results" was the top way people found the site in every year, and the first half of 2026 is no different. "URLs written in emails or SMS," which had been rising since 2024, fell sharply to 921 (JC3). The way people reach fake shops has shifted from messages toward search
- ▸"Bank transfer" remained the most common payment method. However, "credit card" and "QR code payment" had a similar number of answers (JC3). Paying by card or QR code does not mean you are safe
How fake shopping sites get found
JC3 describes the traits of fake shopping sites this way: prices are generally low; the range of products is mixed, including items that do not fit the name of the site; they imitate real companies' sites, or use company names, logos and product photos without permission. One example given is a site that is supposedly for children's goods but also sells car navigation systems and tires.
JC3 also describes how people end up there. Through search results: attackers use a technique called "SEO poisoning" to push fake sites up the rankings. A result may display as "xxx.jp" and then switch to a completely different domain when opened. Through search ads, and through ads on social media, are also described (JC3). Items often never arrive, and when they do, they may be fakes, completely different items, or empty boxes.
- ▸1 Search: you search the web for a product name and look for the lowest price
- ▸2 Open a site: you open a site near the top of results or ads, and "cheaper than official" or "almost out of stock" pushes you to hurry
- ▸3 Order and pay: by bank transfer, credit card or QR code payment, harm can happen with any of them (in JC3's statistics bank transfer was the most common and the other two were similar). Checking before you pay matters most
- ▸4 Notice the harm: the item does not arrive, or a fake or different item does, and the site stops responding
What you can do today (checks before you pay)
- ✓★Change the entry point. Go in again from the official site or official app of the maker or a well-known shop, and see whether the same product is listed (our recommendation)
- ✓★Read the operator information. See whether company name, address, phone number and contact details are all there, and whether the text is copied from other sites. Be wary of a site that sells a mixed range of products (JC3 guidance)
- ✓Pause when the price is far below the going rate. JC3 lists generally low prices as a trait of fake shopping sites
- ✓Pause if bank transfer is the only way to pay. Bank transfer was the most common method in JC3's reports. If there is no other payment method and you cannot confirm the operator information, it is safer not to buy (our recommendation)
- ✓Do not buy straight from search ads or social media ads. JC3 says people are sometimes led to fake sites from ads and from social media
- ✓If you already bought, act fast. Contact your bank, card company or payment service, keep evidence (screenshots of the site, the order email, the transfer record), and ask for help (contacts below)
Where to turn if you paid or are unsure (Japan)
The Consumer Hotline "188" connects you to the consumer center of your local government in Japan. The police consultation line "#9110" and your nearest police station or cybercrime consultation desk also take consultations. If you find a malicious online shop where items never arrive, JC3 accepts reports through its malicious EC site hotline. If you already paid, contact the right place for your payment method right away: the receiving bank for a bank transfer, the card company for a card, or the service provider for a QR code payment. The same applies if you entered personal information or a card number (our recommendation). These contacts are for Japan; elsewhere, use your own country's consumer and police services.
If you share it, these three lines (to forward to family)
- ▸During sale season, a "bargain site" found by search may be fake. In JC3's statistics, "internet search results" was the top way people found fake shops (9,224 reports in H1 2026)
- ▸★Before buying, go in again from the official site or app. Read the company name, address and contact details, and pause if bank transfer is the only option
- ▸If you already paid, call 188 (Consumer Hotline) or #9110 (police) in Japan. Also contact your bank or card company, and keep screenshots and the order email