Online Shopping, Refund and BNPL Scams: Fake Stores, Fake Refunds and Hijacked Pay-Later Accounts

The deal was too good, the package never came, and now a "refund" text wants your card. Here is how shopping, delivery, refund and BNPL scams work, and how the way you pay decides whether you get your money back.

✍️ Written by DigitalWealthSource

🔍 Reviewed by Derek Giordano

📅 Updated Sep 28, 2026

⏱️ 5 min read

📑 On this page ▼

How It Works The Tells The Script to Get Out If You Already Paid Worked Example Decision Rules FAQ

📐 Figures verified Sep 28, 2026 against the FBI Internet Crime Complaint Center's 2025 Internet Crime Report and the FTC's online shopping guidance. Reported losses undercount the real total; most scams are never reported.

The short answer

Online shopping scams take payment for goods that never arrive, fake delivery and refund messages steal card details or remote access, and stolen identities can be used to open buy-now-pay-later plans. Non-payment and non-delivery complaints to the FBI reached 56,478 in 2025, with $503.4 million lost. Pay with a credit card, and go to the retailer yourself instead of following a message.

Numbers That Matter

Figure	Amount	Source	Verified
Non-payment and non-delivery complaints to the FBI, 2025	56,478, with $503.4 million lost	FBI IC3 2025 report	Sep 28, 2026
Phishing and spoofing complaints, 2025	191,561, the most common complaint type	FBI IC3 2025 report	Sep 28, 2026
Safer checkout	Pay by credit card for dispute rights; research unfamiliar sellers	FTC	Sep 28, 2026
Where to report	The FTC, at ReportFraud.ftc.gov	Federal Trade Commission	Sep 28, 2026
What to do next	Contact your card issuer or payment app, keep records	FTC	Sep 28, 2026

How Shopping, Refund and BNPL Scams Work

Fake stores advertise on social media with prices far below everyone else's, take your payment and ship nothing, or something worthless. Marketplace sellers ask you to pay by payment app or gift card, outside the platform's protection. Fake delivery texts say a package is held and link to a page that asks for a small "redelivery fee," which captures your card details.

Refund scams run the other way: a call or email says you were overcharged, a subscription renewed or an order needs a refund, then the "agent" asks for card details or remote access to "process" it, often leading to the refund trick. Stolen identities are also used to open buy-now-pay-later plans in someone else's name, and hijacked shopping or BNPL accounts are used to place orders. Check your BNPL apps and email for plans you didn't open.

The Tells

Prices far below other sellers, a new website, or no real contact information.
A seller who wants payment by payment app, gift card, wire or crypto.
A delivery text asking for a fee or your card number.
An unexpected refund call that needs remote access or your card details.
A BNPL plan or order confirmation you don't recognize.

The Script to Get Out

Don't click links in delivery or refund messages; open the retailer's or carrier's app or website yourself. Hang up on unexpected refund calls. Buy from sellers you can verify, and pay by credit card, which lets you dispute a charge for goods that never arrived.

If You Already Paid or Something Looks Wrong

Dispute the charge with your card issuer, or report it in the payment app or marketplace right away. If you find a BNPL plan you didn't open, contact the provider, freeze your credit and get a recovery plan at IdentityTheft.gov. Report to the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov.

Worked Example

🧮 Worked Example: Same Fake Store, Two Payment Methods (illustrative)

The order: a $180 jacket, 70% off a $600 list price, from a store found through a social media ad. It never ships.
Paid by credit card: you dispute the charge within 60 days of the statement; the card issuer investigates and you can get the $180 back.
Paid by payment app or gift card: there is usually no dispute right; the $180 is most likely gone.
The follow-up text: "Your refund of $180 is ready, confirm your card." It is the same scammers, fishing for more.

An illustration; dispute outcomes depend on the issuer's investigation.

Decision Rules

If this, then that

If a deal is far below every other seller → research the store before paying
If a seller asks for a payment app, gift card or crypto → walk away
If a text says a package is held for a fee → go to the carrier's site yourself
If you see a BNPL plan you didn't open → contact the provider and freeze your credit

Mistakes to avoid

Paying marketplace sellers outside the platform.
Clicking a delivery or refund link.
Giving a "refund agent" remote access or card details.
Ignoring unfamiliar BNPL or order emails.

🚨 Already Paid or Shared Something?

First 24 Hours After a Scam gives you the steps in order for how you paid or what you shared: who to call first, what to report and which deadlines apply.

Open the plan →

Related: First 24 Hours After a Scam gives the recovery steps in order; the Fraud Map shows reported losses per resident in every state; and the Scams & Fraud Protection hub collects every guide.

Frequently Asked Questions

How can I tell if an online store is fake?

Prices far below other sellers, a brand-new website, no real address or phone number, and payment only by app, gift card or crypto are warning signs. Search the store's name with "scam" or "reviews" before buying.

What is a refund scam?

A call, text or email that says you are owed a refund, then asks for your card details or remote access to process it. It often leads to the refund trick, where scammers move your own money and ask you to send back the "extra."

Can scammers open buy now, pay later plans in my name?

Yes, with stolen personal information. If you see a plan you didn't open, contact the provider, freeze your credit and file a report at IdentityTheft.gov.

Is it safer to pay online with a credit card?

Yes. Credit card charges can be disputed if goods never arrive or you were billed in error, while payment apps, gift cards and wires usually can't be reversed.

How common are online shopping scams?

The FBI received 56,478 non-payment and non-delivery complaints in 2025, with $503.4 million lost; phishing and spoofing, including fake delivery texts, was the most common complaint type at 191,561.