Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Wayfair Scams and Cloned Websites - How to Protect Yourself
Wayfair Scams and Cloned Websites - How to Protect Yourself

Wayfair itself is a legitimate multibillion-dollar e-commerce company, but its website is frequently cloned by cybercriminals who use its branding to steal money and credit card information from unsuspecting buyers.

If you have encountered a suspicious website, email, or social media advertisement, review the common variations of this scam below to see if you have been targeted.

1. The Fake Social Media "Clearance" Ad

This is the most common version of the scam, spreading rapidly across platforms like Facebook Marketplace and Instagram.

  • How it works: You see a sponsored ad for a high-end item (like a couch, kitchen cart, or patio set) heavily discounted by 80% to 90% (e.g., a $400 cabinet priced at $79).
  • The Trap: Clicking the ad takes you to a cloned website that perfectly mimics the look of the real store. Once you enter your debit or credit card information, the charge goes through to a fraudulent private entity, but no confirmation email is sent and no item arrives.
  • Fake Domains: Criminals use misleading URLs such as wayfairdeal.com, wf-daysales.com, or wayfaims.shop instead of the legitimate official Wayfair website.

2. Credit Card Fraud and Package Redirection

This identity theft ring involves scammers using your personal details to buy real furniture.

  • How it works: Scammers steal your personal data, open a fraudulent credit line, and build a fake profile using your name and address.
  • The Trap: They buy large quantities of furniture from the authentic store and ship them directly to your home so the transactions bypass automated bank fraud detection. They then track the shipments and attempt to physically intercept or reroute the cargo before you can claim it.

3. Account Takeover and Phishing Emails

Scammers often attempt to hijack legitimate accounts to steal saved payment data.

  • How it works: You receive an alert stating a new device logged into your profile, or you get a fake receipt for an expensive order you never placed.
  • The Trap: The notification contains a fraudulent support link. Clicking it sends you to a credential-harvesting site designed to capture your login information and steal saved wallet data.

What to Do If You Were Scammed

If you already entered your information on a fraudulent page, take immediate action to secure your finances:

  1. Lock Your Cards: Open your online banking app and instantly freeze or lock the card used for the transaction.
  2. Contact Your Issuer: Call the customer service number on the back of your card. Alert them to the fraud, dispute the unauthorized transaction, and request a replacement card with a new number.
  3. Change Your Credentials: If you clicked a link and entered your actual account password, log into the authentic merchant site immediately to update your password and enable Two-Factor Authentication (2FA).
  4. Report the Fraud: Report fake storefronts directly to the social media network hosting the advertisement, or file a complaint with the Federal Trade Commission (FTC).
  5. Check the URL: Ensure you are browsing the official site and not a strange third-party domain.
  6. Too Good to Be True: Massive 90% clearance discounts advertised via social media ads are almost always phishing or credit card skimming scams.
waiting