Cyber police warn about phishing sites duplicating marketplaces

The growing popularity of online trade in Ukraine is accompanied by an increased risk of cybercrime. One of the most dangerous threats remains phishing links that mimic the interface of well-known trading platforms. The goal of such scams is to obtain users' confidential data, including bank card numbers, passwords, and other personal information.

How scammers operate

Criminals develop web resources that are visually identical to official marketplace websites. Users who land on such pages may voluntarily enter their data or make a payment through an unsafe channel. These actions allow fraudsters to gain access to the victims' financial accounts.

Vasyl Romanchenko, Senior Investigator for Operational Search and Partnership in the Field of Information Technologies at the Cybercrime Counteraction Department of the National Police of Ukraine in Kyiv Oblast, notes that with the spread of digital purchases, new methods of extracting funds have emerged. "One of the most common schemes is phishing links that mimic the appearance of popular marketplaces," the expert emphasises.

Signs of a phishing attack

To avoid losses, it is important to learn how to recognise deceptive sites. Experts advise paying attention to several key points:

• Analysis of the URL address. Official domain names (for example, "rozetka.ua" or "olx.ua") have a clear structure. The presence of extra digits, letters, or suspicious symbols (as in variants like "roz3tka.ua" or "olx.com.ua") may indicate a forgery.
• Design quality. Fake pages often contain text errors, low-quality graphics, or an unusual interface structure.
• Method of communication. Legitimate platforms rarely ask users to enter personal data via email or messengers. Messages offering "gifts" or "discounts" that contain urgent calls to action are also suspicious.

Security rules for users

To minimise the risk of losing funds, specialists recommend following these measures:

• Use two-factor authentication (SMS codes, confirmation via apps) to protect your account.
• Verify purchase information exclusively through the official website or the downloaded app, not via links from emails.
• Keep your browser and operating system up to date to protect against known threats.
• Avoid making transactions on public Wi-Fi networks.
• Be sceptical of overly beneficial offers, which may be bait.

It was previously reported that law enforcement agencies also warn about schemes involving so-called "drops" – individuals who, for a reward, provide their bank accounts for transferring other people's funds. The Cyber Police advise not to agree to such "earning" offers and to immediately contact the bank and the police if suspicious transactions are detected on an account.