{"id":97644,"date":"2019-11-27T08:52:19","date_gmt":"2019-11-27T16:52:19","guid":{"rendered":"\/blogs\/?p=97644"},"modified":"2025-08-12T02:47:07","modified_gmt":"2025-08-12T09:47:07","slug":"fake-payment-processors-scam","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/fake-payment-processors-scam\/","title":{"rendered":"Beat Black Friday Scammers: Secure Your Online Purchases From Fake Payment Processors"},"content":{"rendered":"

They see you when you\u2019re shopping, they know when you click “pay” \u2013 cybercriminals, that is. With Black Friday and Cyber Monday deals flooding the internet, malicious actors have many opportunities to exploit users rushing to purchase gifts for family and friends. And according to Ars Technica<\/a>, thieves have devised a new way to steal payment-card data from online shoppers, just in time for the holiday shopping season.<\/p>\n

So, what makes this particular scam different from other credit and debit card scams? Many e-commerce sites will choose to offload payment card charges to third-party payment service platforms, or PSPs. However, cybercriminals have developed fake payment service platforms that highly resemble legitimate PSPs. Rather than infecting a merchant’s checkout page with malware that skims the information after it’s been inputted by the user, cybercriminals infect the merchant site by adding a line or two of code, which redirects the user to a fake PSP at the time of purchase.<\/p>\n

What makes this scam so stealthy? Apart from swapping legitimate payment processing sites with fraudulent ones, cybercriminals closely mimic the traits of real e-banking pages to further trick the user into believing that their purchase is secure. For example, the fake payment processing page checks all the fields once the user completes them or informs the user if the field is invalid. Once the fake PSP collects the data, it redirects the unsuspecting user to the legitimate PSP and includes the purchase amount after successfully stealing the victim\u2019s information.<\/p>\n

Tips to Prevent Your Data from Being Swiped<\/h2>\n

Payment-service platforms are common in the world of e-commerce, particularly for smaller websites that don\u2019t have the resources to harden their servers against sophisticated attacks. As a result, users need to be on high alert for these malicious schemes. Check out the following tips to help prevent your data from being swiped by cybercriminals.<\/p>\n