A new and increasingly sophisticated wave of subscription fraud is infiltrating the web, targeting users with the primary goal of stealing their credit card details.
These scams have advanced far beyond simple phishing techniques. Now, they utilize cunning psychological strategies and highly convincing digital storefronts to trick unsuspecting individuals into handing over their financial information.
The fraudulent sites often resemble legitimate online retailers, offering everything from gadgets and apparel to cosmetics, but with a hidden, sinister motive. Unlike traditional one-off scams, these subscription-based frauds aim to secure continuous payments from victims, drawing them into an ongoing financial trap.
The scam typically starts with an irresistible offer—an unbelievable deal on a product or a “mystery box” of supposed treasures for a tiny fee. But as the user proceeds through the checkout process, the real danger lies in the fine print, where they unwittingly agree to recurring charges that quickly add up, often on a bi-weekly basis.
Cybersecurity experts from Bitdefender have uncovered over 200 fraudulent sites engaged in this deceptive scheme, many of which remain active as of April 2025.
What sets these scams apart is the significant effort put into creating fake e-commerce platforms that look strikingly real, allowing cybercriminals to slip past even the most cautious online shoppers.
Scammers are becoming increasingly sophisticated as online users become more vigilant, according to recent findings from Bitdefender.
“In response to the growing awareness and caution among consumers, fraudsters have significantly advanced their tactics,” Bitdefender experts explain in their latest report. “They are now designing more intricate and persuasive schemes to overcome skepticism and trick individuals into disclosing their sensitive data, particularly credit card details.”
Scammers are exploiting social media platforms, especially Facebook, to promote fraudulent advertisements that mimic well-known brands or popular influencers. These ads often lead users to sleek, professional-looking websites that appear to offer legitimate products at great prices.
The key innovation behind these scams lies in the subscription trap. Once users arrive at the payment page, they’re already sold on the authenticity of the offer. At this critical point, scammers introduce a hidden subscription fee, masked as a bonus or benefit.
For example, one fraudulent site might advertise: “Buy now at the member price and enjoy exclusive access to the best deals in Europe with a 44.00 EUR top-up every 14 days.” This fine print is usually so small that many users miss it during checkout.
While these subscription models vary from site to site, they generally follow a familiar pattern: offering benefits such as “early access to new products” or “massive discounts on all items.” These deceptive memberships often use a points or credit system to obscure the true cost to users’ credit cards.
Even more alarming is the discovery that many of these fake sites share similar design features and registration details pointing to Cyprus, suggesting a well-organized network of cybercriminals targeting users through this elaborate scheme of recurring payments aimed at stealing credit card information.
