Week 45: With Black Friday approaching, beware of AI-generated fake shops and parcel phishing
November is traditionally one of the busiest months of the year for online retailers. With Singles' Day, Black Friday and Cyber Monday approaching, the hunt for bargains is on. However, while shoppers are looking for big discounts, cybercriminals are gearing up to take advantage. The NCSC is already seeing a surge in scam campaigns.
In recent days, the NCSC has seen a rise in reports of fake online shops and sophisticated phishing scams impersonating delivery companies. Cybercriminals are taking advantage of the Christmas shopping rush and the hunt for bargains on Singles' Day, Black Friday and Cyber Monday. This year, they are increasingly using new technologies to make their scams more convincing than ever.
AI-generated online shops
In the past, fake online shops were usually easy to spot because of spelling mistakes, awkward phrasing or graphics that looked out of place. But these sites have become much more convincing. Scammers are increasingly using artificial intelligence (AI) to produce natural-sounding, flawless texts tailored to Swiss shoppers, realistic product images and seemingly genuine customer reviews.
They also copy the appearance of well-known Swiss retailers' websites and register domain names designed to appear Swiss. These fake shops advertise sought-after products such as electronics, furniture, sports equipment, bicycles, branded clothing, watches and jewellery at prices that are often too good to be true. Anyone who places an order and pays in advance, by credit card or with cryptocurrency, risks losing their money. The goods either never arrive or turn out to be of poor quality.
The next trap: Parcel delivery phishing
Alongside fake online shops, another wave of parcel delivery phishing messages is expected this year. Scammers know that almost every household is expecting deliveries at this time of year. They send out large numbers of emails and text messages claiming to be from well-known delivery companies, particularly Swiss Post, DHL and DPD. These fake notifications tell you that you need to pay outstanding customs charges (usually a small amount, such as CHF 1.50) or confirm your address, warning that your parcel cannot be delivered otherwise.
Clicking on the link in the message will take you to a scam website designed to steal your credit card details or trick you into signing up for hidden subscriptions.
In the coming weeks, cybercriminals are likely to have plenty of opportunities to carry out scams. The NCSC therefore recommends that you check offers carefully, avoid clicking on links in unexpected messages, and verify requests for payment. Taking a moment to exercise caution, especially during the busy run-up to Christmas, can protect you from financial loss and identity fraud.
Recommendations
- Be sceptical of unrealistically low prices. If a product is being offered at a price far below its market value, it is highly likely to be a scam.
- If an offer sounds too good to be true, it probably is.
- Check the online shop before buying. Look for customer reviews online. If you can't find any, or if the reviews are negative, it's best to shop elsewhere.
- For more tips on spotting scam websites, see the NCSC's Week 28/2025 review.
- Choose secure payment methods. Wherever possible, pay by invoice, and be particularly wary of shops that only accept payment upfront by credit card, TWINT or instant bank transfer.
- Never click on links in parcel delivery notifications. If you are expecting a parcel, check its status on the delivery company's official website using the tracking number provided by the retailer.
- Never provide your credit card details in response to a text message or email asking you to pay a customs charge or a fee to verify your address. Legitimate delivery companies won't ask for your card details in this way.