Phishing
Fake TikTok shop drives surge in blocked phishing scams, says Surfshark
Surfshark says a fake TikTok shop is now its most-blocked phishing scam, with phishing attempts up 83% per user in six months. The company warns users to watch for red flags.
Ross Grant2 min read
The short version
A fake TikTok shop website is tricking people into giving away their details. Surfshark, a security company, says it blocked more phishing scams in the last six months, mostly because of this fake shop. Phishing is when scammers pretend to be a trusted site to steal your information. Always check website addresses before entering your details online.
By the numbers
- 524%increase in monthly phishing blocks (April to September)ZDNET
- 83%increase in phishing blocks per Surfshark userZDNET
- 18%share of global phishing blocks linked to fake TikTok shop (first 20 days of October)ZDNET
- 241%increase in Surfshark-protected devicesZDNET
What happened?
Surfshark says a fake TikTok shop has become its most-blocked phishing scam. Monthly phishing blocks jumped 524% from April to September, with blocks per user up 83%. The fake shop accounted for 18% of global phishing blocks in early October. Only ZDNET has reported this so far, and the domain name was not revealed.
Who is affected
According to ZDNET (opens in a new tab), the surge in phishing scams has been seen among users of Surfshark, a popular cybersecurity service. The scam targets people who might be interested in TikTok Shop, the e-commerce platform linked to the TikTok social media app. While the report does not specify which countries or age groups are most affected, TikTok's global popularity means the risk could be widespread.
How the attack worked
The main tactic is a phishing scam. Phishing is when attackers send fake messages or set up fake websites to trick people into giving away personal details, passwords or payment information. In this case, scammers set up a counterfeit TikTok Shop website. The fake site looks convincing and aims to lure users into entering sensitive information, thinking they are shopping with TikTok. The Surfshark report did not reveal the exact web address of the fake shop.
What was taken
The ZDNET report does not say exactly what information was stolen or exposed. However, phishing shops like this typically aim to collect login credentials, payment card details, or other personal data that can be used for fraud or identity theft.
The response
Surfshark says it blocked a large number of phishing attempts linked to the fake TikTok Shop. From April to September, the number of monthly phishing blocks jumped from 104,962 to 655,024, a 524% increase. Even after accounting for more people using Surfshark (up 241% in that period), the number of phishing blocks per user rose 83%, from 0.74 to 1.35. In the first 20 days of October, the fake TikTok Shop was still the most-blocked phishing domain, making up 18% of all phishing blocks Surfshark recorded globally. The company has not named the domain involved.
What you should do
If you shop online or use TikTok, be careful with links you receive by email, text or social media. Always check the website address before entering any details. Official TikTok Shop links should come from tiktok.com or the official app. If you are unsure, go directly to the TikTok app or website instead of clicking on a link. Using browser security features or a security service like Surfshark can help block known phishing sites, but staying alert is key.
Why it matters
Phishing scams like this can steal personal and financial information from ordinary users. The rapid growth in blocked attempts shows scammers are getting more aggressive and targeting popular platforms like TikTok. Staying alert to fake sites is essential for online safety.
Key points
- Fake TikTok shop is Surfshark’s most-blocked phishing scam.
- Phishing blocks per user rose 83% in six months.
- The fake shop made up 18% of global phishing blocks in early October.
- Phishing scams can steal personal and payment information.
- Always check website addresses before entering details.
