As online shoppers worldwide flock to major 11.11 sale campaigns, cybersecurity firm Kaspersky has issued a warning about a rising wave of scam and phishing attacks targeting e-commerce customers, including in Malaysia.
According to Kaspersky, cybercriminals are increasingly setting up fake websites that mimic popular platforms such as Amazon and Lazada to harvest users’ payment information. Victims typically receive links to these fraudulent pages via emails or online advertisements, often appearing as official sale promotions.
Once users input their credit card or banking details, no goods are shipped, and the scammers drain victims’ accounts.
Globally, Kaspersky solutions blocked over 38 million phishing attempts impersonating online stores, payment systems, and banking institutions between January and November 2024. The surge coincides with global shopping events like 11.11 and Black Friday.
In Malaysia, 27.9 million web-based attacks were detected in 2024 — a 4% increase year-on-year, according to the firm. Reflecting the same trend, the Royal Malaysia Police (PDRM) reported RM573.7 million in online scam losses in the first quarter of 2025 alone, with fake e-commerce offers among the top causes.
“Fraud spikes during major sales events like 11.11 because urgency and the desire to buy goods cheap clouds judgment,” said Olga Altukhova, Senior Web Content Analyst at Kaspersky. “Always make sure you’re on a legitimate e-commerce website before entering payment information, and avoid clicking on links from unsolicited emails or ads.”
Altukhova also advised consumers to use separate bank cards for online shopping and to contact their banks immediately if they suspect their data has been compromised.
Here are some tips on how to safeguard oneself
Verify the sender’s authenticity before opening promotional emails or links.
Double-check website URLs for typos or inconsistencies before entering personal data.
Use devices equipped with comprehensive security software
Check seller reviews and ratings before making purchases from unfamiliar sites.
Regularly review online banking statements and report any suspicious transactions promptly.
