Shein shoppers in the UK are being warned about a new phishing scam that targets personal and financial information. Fraudsters are sending emails that appear to be from the fashion retailer, offering a 'Shein Mystery Box' and directing recipients to click a link to claim the prize.
The link leads to a counterfeit website that mimics Shein's official site. Entering personal details on this fake site allows scammers to steal the information. Tech expert Marc Porcar, CEO of QR Code Generator, advises: 'If you receive an email with a Shein mystery box, do not open it. It is a phishing email, not from Shein but from unidentified hackers looking to steal your personal information.'
Porcar notes that while Shein does offer legitimate mystery boxes during promotions, the key to identifying a fake is the URL. The scam website's URL differs from the official Shein site. He also warns that Shein only uses email and in-site chat for customer service, never phone calls, text messages, or WhatsApp.
Cybersecurity researchers have identified a malware campaign called 'Mal' involving over 1,000 phishing emails impersonating Shein. Anyone who has fallen victim should immediately contact their bank or payment provider to stop transactions and dispute charges as fraud. Victims should also check credit card and bank statements for unauthorised charges and report them.
Porcar urges victims to contact Shein's legitimate customer support to alert them about the fake website, and to leave online reviews to warn others. He advises continued vigilance for potential identity theft and monitoring credit reports. Incidents can be reported to Action Fraud online or by calling 0300 123 2040.
