Munich IT Expert Uncovers Over 119,000 Fake Online Shops Targeting SMEs

A Munich-based IT entrepreneur, Benedikt Scheungraber, has exposed a vast fraud network comprising more than 119,000 suspected fake online shops affecting around 40,000 companies. These counterfeit websites, which utilize real company logos, images, and contact details, are primarily aimed at small and medium-sized enterprises (SMEs), many of which lack the resources for professional monitoring to detect such scams rapidly.

The fake shops often closely mimic legitimate businesses and operate in over 40 languages. They typically feature suspicious elements such as '.shop' domains, prices quoted in US dollars, and unrealistic discounts ranging between 60 to 70 percent. Consumers shopping on these fake platforms face two-fold risks: receiving no goods after payment and potential credit card information theft, a dual threat Scheungraber refers to as "DoppelCart" or "double shopping cart."

Investigations by the Central Cybercrime Office of Bavaria reveal that these fraudulent activities are highly organized, with perpetrators operating international networks and automated systems. The majority of these fake shops—more than 90 percent—are hosted on servers in China, complicating the pursuit of justice due to cross-border jurisdictional challenges.

Sites such as those warning local police in Dillingen and Donau-Ries have alerted the public to instances where customers ordered firewood and pellets online but never received their goods. In response, Scheungraber has compiled a database of these fraudulent websites, making it publicly accessible for companies to verify if their brands or products have been compromised.

This discovery highlights a significant cybercrime threat to SMEs in Germany, emphasizing the critical need for increased vigilance and professional monitoring to protect against sophisticated online fraud.

According to Scheungraber and investigative authorities, the fake shops’ high volume and international nature make detection and resolution particularly challenging, underscoring the urgency for collaborative efforts in cybersecurity enforcement and SME awareness.