A social media advert does not mean the platform verified the shop

You are scrolling through short videos when a product you searched for yesterday appears. The logo is familiar, the film looks professional and the price lasts for “20 minutes only”. Because the advert sits inside a major platform, it is easy to assume somebody checked the shop and seller first.

Paid placement is not a certificate of honesty. The advert might belong to the genuine brand, an intermediary, a counterfeit shop or somebody impersonating an existing company. The fact that it matches your interests says something about advertising systems, not the offer’s credibility.

Do not buy from the advert’s emotion

Record the product name and close the advert. Then find the company independently or type the brand’s known address. Compare the domain, price and promotion terms. If the offer does not appear in the official shop, the difference needs an explanation.

Look for the trader’s full name, contact details, returns process and delivery cost. A contact form and payment-provider logo are not enough. Search for reviews away from the shop’s own page, combining its name with words such as “scam”, “complaint” or “refund”. Remember that a handful of enthusiastic reviews can also be copied or purchased.

The price is meant to distract from the address

Fraudulent adverts often feature designer clothes, electronics or scarce products. A dramatic discount, countdown and low-stock warning reduce the time available to think. You do not have to prove the offer is fraudulent. Being unable to verify the seller before payment is enough reason to leave.

Read the actual domain rather than the fragment containing the brand. Check whether the advert consistently leads to the same shop. A separate payment domain is not automatically suspicious, but its operator and purpose should be clear before you provide card details.

At work, an advert may sell more than a product

A sponsored post may promise a free guide, conference, AI tool or “industry report” in exchange for your work address, password or permission to reach company files. Do not sign in with a business account merely because the advert uses a well-known brand.

If the material genuinely interests you, find the organiser’s site separately. For software and extensions, use your organisation’s catalogue and approval process. Advertising does not override purchasing or installation rules.

If you already paid

Preserve the advert, shop address, product description, receipt and correspondence. Check the merchant name on the statement. If the item never arrives, is counterfeit or costs more than agreed, contact the seller, your bank or card issuer, and the platform that displayed the advert.

If you created the shop account with a password reused elsewhere, change it on those other services. Be cautious when a later “refund team” asks for a code, additional payment or remote access to your telephone.

What the source says and what Breachroad recommends

On 10 August 2026, the US Federal Trade Commission explained that social media adverts are not always thoroughly vetted. It warns that scammers can buy adverts to impersonate brands, sell counterfeit goods or promote fake investment schemes. The FTC advises checking the company before buying and searching its name with terms such as “scam” or “complaint”.

Breachroad recommends separating two actions: an advert can help you discover a product, but the seller should be verified outside the advert. The same principle applies to personal shopping and tool offers aimed at employees.

Use our safer online-shopping checklist before paying. We help organisations practise assessing offers and messages through cybersecurity training.