# 119,000 fake shops steal credit card details

> AI-powered fake shops mimic brands to steal payment info.
- Title: 119,000 fake shops steal credit card details · Fox News
- Summary: AI-powered fake shops mimic brands to steal payment info. 119,000 fake DoppelCart stores impersonate brands to capture credit card details and bank…
- Keywords: doppelcart, fake shops, credit card details, nebty, web skimming, bank verification codes, online scams, t-commerce, payment security, cyberguy, news, politics
- Source: Fox News — https://foxnews.com/tech/119000-fake-shops-could-steal-your-credit-card-details
- Author: Kurt Knutsson, CyberGuy Report
- Published: 2026-09-18T00:00:00+00:00
- Read time: 1 min
- Topics: doppelcart, fake shops, credit card details, nebty, web skimming, bank verification codes, online scams, t-commerce, payment security, cyberguy, news, politics
## Fake shopping sites
Nebty found 119,000 fake stores impersonating brands.

> CyberGuy says fake stores copy product catalogs and branding
## How they work
Sites use .shop domains and steal payment details at checkout.

> DoppelCart steals card numbers, expiration dates, security codes
## Why they look real
Scammers copy real company pages and branding directly.

> DoppelCart mimics 44,182 brands with two clones per brand
## The discount trap
65% discounts lure shoppers into fake stores.

> CyberGuy warns about extreme discounts from unfamiliar retailers
## Bank code theft
One-time bank verification codes can be captured.

> Attackers use bank verification codes to bypass transaction protections
## Real companies affected
Legitimate businesses get complaints about fake orders.

> Nebty says legitimate businesses get angry customers from fake orders
## How to spot scams
Check web address, research retailers, use credit cards.

> CyberGuy says check the domain before entering payment details
## What to do next
Report fraud to FTC and change passwords.

> The FTC recommends contacting your financial institution immediately
## Why it matters
DoppelCart steals payment details and bank verification codes.

> DoppelCart captures card numbers, expiration dates, security codes
## The scale
2.72% of .shop domains are fake DoppelCart stores.

> Nebty says 118,787 .shop domains are fake DoppelCart stores
## How they steal
Checkout pages send data to command-and-control servers.

> DoppelCart sends payment details through websockets to attackers
## Real impact
Scammers target real companies with fake orders.

> Legitimate businesses get angry customers from fake orders
## The warning
Check web address and research retailers before paying.

> CyberGuy says check the domain and search for the retailer
## What happens next
Report fraud to FTC and change passwords.

> The FTC recommends contacting your financial institution immediately
## The risk
One-time bank codes can be used for fraudulent transactions.

> Attackers use bank verification codes to bypass transaction protections
## The solution
Use strong security software and transaction alerts.

> CyberGuy recommends strong antivirus software and transaction alerts
## Key takeaway

119,000 fake DoppelCart stores impersonate brands to capture credit card details and bank verification codes.