ALERT: Irish Shein shoppers hit with major scam warning

Online shoppers have been urged to be wary of an email purportedly from popular online store Shein, containing a coveted Shein Mystery Box and urging them to click a link to claim their prize.

Marc Porcar, CEO of QR Code Generator said,

“If you receive an email with a “Shein mystery box,” do not open it. It is a phishing email, not from Shein but from unidentified hackers looking to steal your personal information.

“Designed to trick recipients into clicking on a link that redirects them to a fake website, this website mimics Shein’s official website, allowing users to enter their personal information to win a prize.

“Whilst Shein does offer legitimate mystery boxes during promotions or special events, the way to know if they are legitimate is to recognize the website you are directed to. 

"The website you are directed to by scammers mimics Shein’s, and the obvious way to indicate this is the URL, which is different from the official website.”  

There are several fake Shein websites circulating the web, however there are ways you can spot these.

• If the domain name does not match Shein’s official site (shein.com), variations should be considered untrustworthy
• Check for a legitimate contact page with company addresses, customer service numbers, and employee information. Scam sites will often not have these
• Search for online reviews of the website from a trusted independent source 
• Look for poorly edited images with watermarks or low resolutions. Shein uses professional photography for all of its products
• Be cautious of prices that seem more than 50% lower than Shein’s real pricing, as extreme discounts are always suspicious
• Watch out for spelling and grammar errors throughout the site
• Make sure secure checkout protocols like “https” URLs and lock icons are present before entering payment details anywhere

Marc Porcar adds,

“When speaking with customer service at Shein, it is important never to share any personal or payment information via phone call, text message, or WhatsApp. Shein only uses email and in-site chat for customer service.

“Shein is one of the world’s most popular shopping platforms, with more than 500 million downloads on the Google Play Store alone, scammers have a lot of potential to trick shoppers.”

Recent reports reveal cybersecurity researchers identified a malware campaign named Mal. This campaign involved more than 1,000 phishing emails impersonating Shein. These emails featured misleading subject lines and links to credential-harvesting sites. 

For those who have ever placed an order through a fraudulent Shein website and had personal information stolen, or have not received an item, Marc Porcar shares what steps to take:

“First things first, immediately contact your bank or payment provider to stop any pending transactions and explain you have paid a scam website impersonating Shein. You can then dispute the charges as fraud.

“Ensure you check your credit card statements and bank account closely for any unauthorized charges from the fake website and report any if so.

“Contact the legit Shein customer support using the number on their official website to flag the fake website.

“To warn other potential victims, leave online reviews about your experience with the scam site to warn other potential victims. 

“Continue to be vigilant about any potential identity theft that could occur if personal information was entered on the fake site and monitor all of your credit reports.

“To file an official Internet crime report about the fraudulent website, contact the FBI's Internet Crime Complaint Center at www.ic3.gov.”