Lookalike Brand Website with a Clearance Sale by email

How it looks by email, the red flags and what to do.

Email is slower than SMS, so these scams usually pretend to be a bill, a refund, an account lock or a job offer and ask you to log in or open a file. Lookalike Brand Website with a Clearance Sale is one of the ways this shows up: A site that copies a famous brand's name with one letter changed offers a huge sale. It takes payment and card details without delivering.

What lookalike brand website with a clearance sale looks like by email

• A sender address that is almost, but not exactly, the real domain.
• A button that says "Verify account" or "View invoice".
• An attachment such as a PDF, ZIP or HTML file you did not expect.

The scammer registers a domain that looks almost the same as a famous brand, such as swapping letters or adding a word like 'outlet' or 'sale'. He copies the real site's pages with automated tools, so the look matches perfectly. A forwarded WhatsApp message, an SMS or a paid ad spreads the link, usually just before a festival or end-of-season sale when people expect discounts.

Red flags to check on the email

• The web address has extra letters, hyphens or words like 'outlet' or 'official sale'.
• The discount is much steeper than the brand's own seasonal offers.
• The link arrived in a forwarded message rather than from the brand's own app or newsletter.
• The site has no working order tracking and an unclear contact page.
• The email asks you to log in through the link rather than through the official app.
• It carries a surprise invoice, refund or legal notice.

What to do

1. Type the brand's website by hand or use its official app instead of the link.
2. Compare the address letter by letter with the one you know.
3. Do not forward the message to family groups.
4. Check the full sender address, not just the display name.
5. Report it as phishing in your email app and delete it.
6. If you typed a password on the page, change it at once and turn on two-step verification.

Use Report phishing in your email app. If money or accounts are affected, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. Call your bank on the number printed on your card and ask to block it if card details were entered.
2. Call 1930 and report at cybercrime.gov.in with the website name and payment receipt.
3. Check your statements for other purchases and report each one.
4. Take screenshots of the site, the order page and the payment before the domain disappears.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Link check in Safeavio Sentinel looks for lookalike domains, shortened links and risky patterns, so you can paste the sale link before opening it. Scam check can read the forwarded message you paste and point out urgency and too-good-to-be-true pressure. Safeavio cannot tell you if a brand will honour its own sale, so compare it with the brand's official channels.

Full guide: Lookalike Brand Website with a Clearance Sale: how it works, signs and what to do. Other channels: SMS, WhatsApp, social media.

Questions