- Consumer Information Center

Black Friday – A Guide to Cyber Threats and Safe Online Shopping

Black Friday may bring real bargains, but it also carries the risk of unnecessary spending—or even ending up without your goods and without your money. The day attracts millions of customers tempted by promotions and “once-in-a-lifetime deals.” Unfortunately, the internet is full of people eager to exploit this. Every year, there are cases of fraud that result in financial loss or identity theft. The best defense is common sense and skepticism. If an offer seems too good to be true, it probably is. Shop wisely and safely. It’s worth knowing what traps await online shoppers and how to avoid them.

Fake Online Stores – Buying Thin Air
One of the most common threats is fake online stores. Scammers create websites that look identical to those of well-known brands. They copy logos, photos, and even the layout—often changing just one letter in the domain name. You pay for goods that never arrive, and the seller suddenly disappears.

How not to get scammed:

• Verify the seller. The length of their activity online doesn’t guarantee honesty. Cybercriminals can impersonate legitimate businesses.
• If in doubt, check the store in the official business registry (KRS/CEIDG).
• Check address details, phone number, delivery and return policies, payment methods, and privacy policy. If the store doesn’t provide contact details and only offers a contact form—avoid it.
• Check whether the store is based in Poland, the EU, or outside the EU.
• Never share your login details, passwords, bank data, or personal information until you’re sure the site is genuine. Always double-check the domain name—fake sites often differ by just one character.
• Look for reviews outside the store’s website. Search the store’s name with words like “reviews” or “scam.” Beware of fake reviews—some stores buy positive comments or use bots. Read reviews critically, paying attention to repetition and publication dates.
• Be cautious about how you found the site. If it was through social media ads or a link sent via messenger or email, stay alert—it might be a scam.
• Avoid “everything stores.” It’s unlikely that one shop sells jackets, furniture, tillers, and pipe freezers all at once.
• Don’t fall for emotional manipulation. Ads claiming “a family business closing after 30 years – 80% off” are often scams designed to lower your guard. Stories about “retirement” or “hard decisions” are fake narratives meant to justify unrealistic discounts. Combined with countdown timers and “everything must go” messages, they pressure you into acting fast. Always verify the domain and never click on links that promise too much.

Phishing During Black Friday: Couriers, Stores, and Banks
During Black Friday, scammers intensify phishing campaigns. They send SMS messages pretending to be couriers asking for small payments, emails with “super deals,” or phone calls from fake bank employees claiming they need to verify your data or block suspicious transactions.
Scammers exploit the fact that you’re expecting multiple deliveries, making messages about “delivery issues” seem believable. They usually ask for a small payment (e.g., 1 PLN) or card details. The link leads to a fake payment or banking page, and your data ends up in the hands of criminals.

How not to get scammed:

• Never click on links in SMS or emails, especially those asking for payments, data verification, or “secret discounts.”
• Check your order status manually—go directly to the store’s website or app and log in.
• Never share sensitive data outside official banking channels. Real companies, couriers, or banks never ask for full card details or login credentials via SMS or email.
• Avoid suspicious promo links. If you want to check a deal, type the store’s address directly into your browser.

Social Media Traps – Big Deals, Big Risks
Fake ads on social media often promise “Super laptop 70% off – today only!” and lead to suspicious sites. Real promotions from major brands are always announced on their official websites or apps. Many of these ads are fronts for fake stores or phishing pages.
Artificial intelligence makes it easier to create realistic fake ads and stores. Image and video generators can produce professional-looking banners, while voice synthesis and deepfakes can mimic celebrities endorsing products. AI also automates fake reviews and ad variations, making scams more widespread and cheaper to run.
Scammers use auto-generated domains and ready-made e-commerce templates to create “stores” with fake carts and payment forms. During Black Friday, these scams peak because users are actively hunting for extreme discounts. Fake ads often use stolen images and emotional triggers to push you into quick decisions.

How not to get scammed:

• Be skeptical. If an offer seems too good to be true, it probably isn’t real. Branded electronics or luxury clothing with 70–90% discounts are almost always scams.
• Verify the source. If a major retailer truly offers such a deal, you’ll find it on their official website.
• Check the advertiser’s profile—how long it’s been active, how many followers it has, and whether comments are disabled or suspiciously generic.
• If you click on an ad, check the domain carefully. Fake sites often have typos or strange extensions (e.g., “.xyz” instead of “.pl”).
• Don’t give in to time pressure. Fake countdowns and “last items” messages are designed to rush you. Take a step back and verify before entering any data.

Malicious Add-ons and Apps – “Helpers” That Steal
Some scams hide behind malicious apps or browser extensions offering coupons, automatic discount codes, or price comparisons. These “helpful” tools often track your activity and steal passwords or card numbers. Once installed, they can perform unauthorized purchases or identity theft. Scammers rely on your rush to save money to make you ignore warnings.

How not to get scammed:

• Install only verified apps from official stores like Google Play or App Store. Check the developer, number of downloads, and review content—not just star ratings.
• Review app permissions before installing (e.g., access to contacts, camera, or browsing history).
• Use antivirus software and keep it updated—it can warn you about malicious extensions.

The Trap of Time Pressure and Impulsive Decisions
Black Friday marketing—from fake discounts to false “closing sales”—is designed to create time pressure and FOMO (fear of missing out). “Last item” or “limited time” offers with countdowns are meant to paralyze your rational thinking and push you into impulsive purchases. Scammers know that haste makes you overlook red flags like strange URLs or missing return policies.
Pause for a moment. Don’t act on impulse. If a deal is real, it won’t vanish in minutes. Common sense is worth more than a small discount.

How not to get scammed:

• Take a deep breath and slow down. Compare prices and reviews in reputable stores before buying.
• Enter payment details only after verifying the store’s credibility, URL, and contact information. If you feel pressured—walk away.
• Prepare a shopping list in advance and stick to it. Buy only what you’ve already researched.

If You Fall Victim to a Scam, Don’t Panic
Even if you’ve been careful, scams can happen. Quick, organized action is key to minimizing losses and protecting your data.

What to do:

• Contact your bank immediately. If you shared card details or noticed unauthorized transactions, block your card and online banking access. Ask about a chargeback procedure.
• Report the unauthorized transaction formally to your bank as soon as possible.
• Collect evidence. Take screenshots of the fake site or ad, save all related emails and SMS messages, and note the date, time, and amount lost.
• Report the fraud to law enforcement. File an official complaint and bring all evidence.
• Report the incident to CERT Polska. Reporting suspicious sites and phishing messages helps block malicious domains and protect others.
• Change your passwords and scan your devices for malware to ensure no spyware has been installed.

Shop Smart This Black Friday
In summary, Black Friday can help you save money—but only if you stay alert. It’s the peak season for cybercriminals exploiting chaos and time pressure. Always verify store credibility, be cautious of “super deals” (especially those over 70% off), and use secure payment methods like BLIK or trusted gateways. Check URLs carefully, avoid clicking on links from SMS messages, and ignore emotional “closing sale” messages.
Remember: if an offer looks too good to be true—it probably is. Your digital safety is worth more than any discount.