Fake Order-Confirmation 'Cancel Here' Phish
An email or text confirms a big order you never placed and offers a 'cancel' link or number — which leads to a fake login or a scam call.
Think a message like this reached you? You can check it right now.
What this scam is
You receive an order confirmation for an expensive item you did not buy, with a prominent way to cancel or dispute it. Alarm makes you click the link (a fake login that steals your password) or call the number (scam 'support' that asks for card details or remote access). No order exists; the fake receipt is bait. Check your real account, not the message's links.
What it usually looks like
- A confirmation for a pricey order you did not place.
- A 'cancel order' or 'dispute charge' link or number.
- A login page or callback that is not the real retailer.
- Urgency to cancel before it ships.
Common warning signs
- An order you have no memory of placing.
- The 'cancel' link goes to a non-official site.
- A phone number urging you to call to dispute.
- Requests for login or card to 'cancel.'
Example wording scammers use
“Your order for a MacBook Pro ($2,199) is confirmed. If this wasn't you, cancel here: order-cancel-support.net”
“PayPal: You authorized a $749 payment. To dispute, call 1-8XX now.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Your retailer or PayPal login.
- A scam-support call to get card details or access.
- Your fear of an unknown charge.
What to do
- Do not click or call; open your real account/app to check for the order.
- Contact the retailer only through official channels.
- Delete the message if no such order exists.
- Enable two-factor authentication.
What to do if you already responded
- Change the account password and revoke sessions.
- Call your card issuer if you shared card details.
- Report at reportfraud.ftc.gov.