Skip to content

Malware-Spreading TikTok Sham Shops Swindle Crypto from 15,000 Victims

Online buyers on TikTok have encountered a phishing scam, with fraudsters creating imitations of genuine pages to trick victims.

Unchecked Accounts on TikTok: Over 15,000 Fraudulent Shops Infecting Users with Malware for...
Unchecked Accounts on TikTok: Over 15,000 Fraudulent Shops Infecting Users with Malware for Cryptocurrency Theft

Malware-Spreading TikTok Sham Shops Swindle Crypto from 15,000 Victims

The ClickTok Scam: A Major Threat to TikTok and Facebook Shoppers

In a concerning development, a large-scale fraud operation known as the ClickTok Scam is targeting TikTok Shop and Facebook shoppers. This scam creates highly convincing fake TikTok Shop websites, clone apps, and phishing campaigns combined with malware distribution to steal user credentials and payment information.

The ClickTok Scam impersonates the exact look and feel of TikTok Shop, including fake login pages, flash sale offers, and affiliate dashboards. It uses AI-generated promo videos and paid advertisements on platforms like Facebook to lure victims off TikTok to communication apps such as WhatsApp or Telegram, where scammers apply pressure tactics to make users take risky actions. Fake "shop" apps infected with spyware like SparkKitty harvest wallet and login credentials, enabling account takeovers and unauthorized transactions.

Impact on TikTok and Facebook Shoppers

Shoppers are tricked into entering credentials on fake sites or installing malware-infected apps. Their accounts and linked payment wallets get compromised, leading to theft of funds. Scammers push crypto-only payments, which are irreversible, making recovering losses difficult. The scam also harms TikTok creators and brands by abusing affiliate programs and damaging trust in the ecosystem.

To protect themselves, shoppers should only use official apps and websites, enable two-factor authentication or passkeys, avoid crypto payments directed by suspicious sources, and verify domains carefully. Platforms and advertisers are advised to implement stricter brand controls to reduce the spread of such fraudulent campaigns.

The Wider Implications

Social media scams often imitate the layout of trusted platforms, exploit impulse buying psychology, and deliver malware that gathers users' information during shopping or payment. Until these measures are in place, shoppers need to exercise caution because lucrative discounts in the social media world can often be traps for something extremely harmful.

Without stronger advertiser verification, better detection of domains, and tighter controls over integrated shopping features, these cyberattacks continue to increase and are difficult to stop. This malware works equally well for both Android and iOS users, making both vulnerable to these scams.

The replicas contain approximately 15,000 fake URLs on TikTok Wholesale and mall-branded pages. A massive cyber-fraud operation, named 'ClickTok' or 'FraudOnTok,' is targeting online shoppers through more than 10,000 fake TikTok Shop and Facebook storefronts. These scams, particularly targeting younger users, often use urgency tactics to deceive shoppers.

The ClickTok scam is just one example of how integrated payment systems, social media promotions, and online features can be exploited by scammers. Another social media scam exploited celebrity images and promoted fake crypto exchanges, storing users' personal information and sensitive data through PowerShell scripts. As social media shopping grows in popularity, it's crucial for users and platforms to stay vigilant against these threats.

Read also:

Latest