CTM360 Research Reveals 30,000+ Fake Online Shops Impersonating Fashion Brands

CTM360’s threat intelligence uncovers FraudWear, an industrialized brand-impersonation campaign that operates tens of thousands of disposable fashion e-commerce sites to defraud consumers worldwide. The campaign uses localized storefronts, ad-driven distribution, rapid domain churn, and legitimate payment flows to harvest personal and payment data, demonstrating the need for ecosystem-level, intelligence-driven defenses. #FraudWear #CTM360

Keypoints

Over 30,000 malicious fashion e-commerce domains across 80+ countries impersonate 350+ brands.
Fraudsters recreate full storefront experiences—design, catalogs, checkout, and localized marketing—to increase conversions.
Campaigns are ad-driven, leveraging sponsored ads and fake social profiles to rapidly scale and target customers.
Attackers use disposable domains (50+ new domains per day) and legitimate payment flows like PayPal tied to mule or compromised accounts.
Defenses must shift from individual takedowns to continuous, intelligence-driven visibility across domains, ads, and payment chains.