PhishPin / Brands Live Phishing Data / Retail, delivery & marketplaces
Retail, delivery & marketplaces phishing: which brands are copied the most
71 retail, delivery & marketplaces brands are tracked in PhishPin's index. Together they have 4,931 hostnames in phishing feeds and 295 newly registered lookalike domains from the last 15 days.
Ranking: most impersonated retail, delivery & marketplaces
| # | Brand | Share of category hosts | Pressure | Hosts | Lookalikes |
|---|---|---|---|---|---|
| 1 | Allegro | 51% | 73 · High | 2,501 | 6 |
| 2 | Amazon | 27% | 81 · Critical | 1,343 | 80 |
| 3 | Rakuten | 8% | 62 · High | 400 | 12 |
| 4 | eBay | 6% | 49 · Elevated | 299 | 1 |
| 5 | Mercado Libre | 3% | 53 · Elevated | 141 | 10 |
| 6 | Shopee | 2% | 52 · Elevated | 99 | 16 |
| 7 | Uber | 1% | 31 · Moderate | 29 | 1 |
| 8 | Carrefour | 1% | 35 · Elevated | 26 | 4 |
| 9 | Costco | 0% | 37 · Elevated | 15 | 13 |
| 10 | Best Buy | 0% | 29 · Moderate | 11 | 4 |
| 11 | Target | 0% | 32 · Moderate | 9 | 11 |
| 12 | Walmart | 0% | 30 · Moderate | 9 | 8 |
| 13 | Lidl | 0% | 26 · Moderate | 6 | 6 |
| 14 | AliExpress | 0% | 23 · Moderate | 6 | 3 |
| 15 | Taobao | 0% | 26 · Moderate | 4 | 10 |
| 16 | Overstock | 0% | 23 · Moderate | 3 | 8 |
| 17 | Lazada | 0% | 19 · Moderate | 3 | 3 |
| 18 | Flipkart | 0% | 21 · Moderate | 2 | 8 |
| 19 | Sephora | 0% | 18 · Moderate | 2 | 4 |
| 20 | AutoZone | 0% | 16 · Moderate | 2 | 3 |
| 21 | CVS | 0% | 16 · Moderate | 2 | 3 |
| 22 | Nike | 0% | 15 · Moderate | 2 | 2 |
| 23 | IKEA | 0% | 13 · Low | 2 | 1 |
| 24 | Shein | 0% | 13 · Low | 2 | 1 |
| 25 | Tesco | 0% | 9 · Low | 2 | 0 |
| 26 | DoorDash | 0% | 17 · Moderate | 1 | 7 |
| 27 | Myntra | 0% | 15 · Moderate | 1 | 5 |
| 28 | Kroger | 0% | 13 · Low | 1 | 3 |
| 29 | Zara | 0% | 13 · Low | 1 | 3 |
| 30 | Ticketmaster | 0% | 9 · Low | 1 | 1 |
| 31 | Aldi | 0% | 5 · Low | 1 | 0 |
| 32 | Argos | 0% | 5 · Low | 1 | 0 |
| 33 | Dollar Tree | 0% | 5 · Low | 1 | 0 |
| 34 | Grubhub | 0% | 5 · Low | 1 | 0 |
| 35 | Lululemon | 0% | 5 · Low | 1 | 0 |
| 36 | Sam's Club | 0% | 5 · Low | 1 | 0 |
| 37 | GameStop | 0% | 16 · Moderate | 0 | 17 |
| 38 | Adidas | 0% | 11 · Low | 0 | 6 |
| 39 | Decathlon | 0% | 9 · Low | 0 | 4 |
| 40 | MediaMarkt | 0% | 8 · Low | 0 | 3 |
| 41 | Temu | 0% | 8 · Low | 0 | 3 |
| 42 | Wayfair | 0% | 8 · Low | 0 | 3 |
| 43 | Zalando | 0% | 8 · Low | 0 | 3 |
| 44 | Currys | 0% | 6 · Low | 0 | 2 |
| 45 | Deliveroo | 0% | 6 · Low | 0 | 2 |
| 46 | Dollar General | 0% | 6 · Low | 0 | 2 |
| 47 | Just Eat | 0% | 6 · Low | 0 | 2 |
| 48 | Marks & Spencer | 0% | 6 · Low | 0 | 2 |
| 49 | Zomato | 0% | 6 · Low | 0 | 2 |
| 50 | Asda | 0% | 4 · Low | 0 | 1 |
| 51 | Etsy | 0% | 4 · Low | 0 | 1 |
| 52 | Home Depot | 0% | 4 · Low | 0 | 1 |
| 53 | Instacart | 0% | 4 · Low | 0 | 1 |
| 54 | Jumia | 0% | 4 · Low | 0 | 1 |
| 55 | Meesho | 0% | 4 · Low | 0 | 1 |
| 56 | Nordstrom | 0% | 4 · Low | 0 | 1 |
| 57 | BigBasket | 0% | 0 · Low | 0 | 0 |
| 58 | Chewy | 0% | 0 · Low | 0 | 0 |
| 59 | John Lewis | 0% | 0 · Low | 0 | 0 |
| 60 | Kohl's | 0% | 0 · Low | 0 | 0 |
| 61 | Lowe's | 0% | 0 · Low | 0 | 0 |
| 62 | Lyft | 0% | 0 · Low | 0 | 0 |
| 63 | Macy's | 0% | 0 · Low | 0 | 0 |
| 64 | Newegg | 0% | 0 · Low | 0 | 0 |
| 65 | Nykaa | 0% | 0 · Low | 0 | 0 |
| 66 | Rite Aid | 0% | 0 · Low | 0 | 0 |
| 67 | Sainsbury's | 0% | 0 · Low | 0 | 0 |
| 68 | StubHub | 0% | 0 · Low | 0 | 0 |
| 69 | Swiggy | 0% | 0 · Low | 0 | 0 |
| 70 | Uniqlo | 0% | 0 · Low | 0 | 0 |
| 71 | Walgreens | 0% | 0 · Low | 0 | 0 |
Common lures against retail, delivery & marketplaces
- An "order confirmation" or "payment declined" email for something you did not order.
- A refund, reward or survey offer that asks for your card details.
- A fake seller or buyer message that moves the chat off-platform to a payment link.
- A text about a gift card, delivery problem or account lock with a short link.
Red flags
- The order or amount does not match anything you did, and the email pushes you to call or click.
- Prices or rewards are too good to be true, and the checkout page is on a different domain.
- You are asked to pay by gift card, wire or a link sent in chat.
If you already clicked or entered details
Contact your card issuer to cancel the card and dispute any charge, change the account password, and review saved addresses and payment methods. Use the retailer's official app or site to check any order.
Is your retailer or marketplace being copied?
Attackers copy any brand whose customers log in or pay. Enter your domain for a free check of email-spoofing gaps, registered lookalikes and feed listings.
Talk to us about takedownsQuestions
Which retail, delivery & marketplaces brands are impersonated the most?
Allegro leads with 2,501 hostnames in phishing feeds, followed by Amazon (1,343) as of 1 Nov 2026.
How can I spot phishing that targets retail, delivery & marketplaces?
The order or amount does not match anything you did, and the email pushes you to call or click. Prices or rewards are too good to be true, and the checkout page is on a different domain. You are asked to pay by gift card, wire or a link sent in chat.
What should I do if I fall for a fake retailer or marketplace page?
Contact your card issuer to cancel the card and dispute any charge, change the account password, and review saved addresses and payment methods. Use the retailer's official app or site to check any order.