Facebook Meta ads are used in Phishing scams.

Do Not Trust Facebook ads or Sponsored Posts.

In today’s digital world, cybercriminals are getting increasingly sophisticated in mimicking legitimate e-commerce sites. Fake or cloned websites like [https://www.shop-capeunionmart-za.com/ often mirror trusted brands to deceive shoppers. These sites can look remarkably authentic, and some even run ads on social platforms like Facebook, further boosting their credibility. For consumers and businesses alike, understanding how to identify and avoid these sites is critical.

How Do Cybercriminals Create Cloned Websites?

Cloned websites are exact replicas of real sites, typically created by copying the source code and web assets from the original. Here’s a step-by-step on how cybercriminals create and promote these fake sites:

1.Copying Site Layout and Content: Using tools or manual methods, criminals duplicate the design, images, product listings, and even fonts from the original website. The goal is to mimic the original so well that users can’t distinguish the fake from the real.
2. Setting Up Look-Alike URLs: The cloned site often uses a URL that closely resembles the real website’s domain, like adding extra characters, changing extensions (e.g., .com to .net), or subtly misspelling the domain name.
3. Running Social Media Ads: Fraudulent sites can run paid ads on social media platforms like Facebook. By using keywords associated with the legitimate brand, they can make their ads appear in users' feeds. These ads often promote fake discounts or exclusive deals to lure unsuspecting users.
4. Tracking Conversions with Facebook and Google Analytics: Many cloned sites use tools like Facebook Pixel and Google Conversion Tracking to monitor ad clicks and conversion rates, helping them measure the effectiveness of their deceptive ads.

How to Spot a Cloned Website?

1. Check the URL Carefully: Look closely for subtle typos or added characters in the domain name. Cloned sites often rely on users not noticing small differences in URLs.
   2. Analyse the Website’s Content: Cloned sites may use copied text, but the quality and coherence of text can sometimes be a giveaway. Poor grammar, low-quality images, or inconsistent product information can be signs of a fake.
   3. Inspect the Website’s Security: Legitimate websites use HTTPS encryption, which can be identified by a padlock icon in the address bar. However, some cloned sites also use HTTPS, so don’t rely on this factor alone.
   4. Use Tools Like BuiltWith to Analyse Tracking Code: Tools like [BuiltWith](https://builtwith.com/) can help you inspect if a website is using legitimate tracking tools, such as Facebook Pixel or Google Conversion Tracking. You can look up tracking details to see whether the website is associated with the original brand or has suspicious tags.
   5. Check for Facebook and Google Pixels: You can use browser extensions like "Facebook Pixel Helper" or "Google Tag Assistant" to detect Facebook Pixel and Google Ads tags on a webpage. These can reveal how the cloned site is tracking visitors from social media ads.
   6. Review the Social Media Page Linked to Meta Ads: Cloned sites often create fake social media pages, sometimes with fewer followers or engagement compared to the legitimate brand. Look for signs like inconsistent posting dates, low engagement, or unusual brand logos and graphics.

What is most concerning, is we reported the phishing Facebook Meta ads of the cloned Cape Union Mart website several times and the same phishing Facebook Meta ads kept reappearing in my feed. We have seen Fakebook Meta facilitate all sorts of misconduct from election interference, disinformation, sexual exploitation in Facebook reels and Facebook Meta ads pushing phishing websites into our feeds eroding all trust in Meta and its affiliates. There is a Facebook Meta approved Ad account, Facebook page and facebook_pixel_id\":\"3833864880191477 to track visitors and their IP on the cloned Cape Union Mart Website.

Investigating the Cloned Facebook Page.

The cloned website [https://www.shop-capeunionmart-za.com/ appears to be using ads on a cloned Facebook page https://web.facebook.com/profile.php?id=61566275847315.

1. Check Page Details and Engagement: Review the number of followers, types of posts, and overall engagement. Genuine pages will typically have a large following, regular interactions, and high-quality content.
   2. Inspect the Page Creation Date: Fake pages are often created recently and lack the history and reputation of the real brand’s page. You can find the page creation date under the “Page Transparency” section on Facebook.
   3. Analyse Advertisements: Facebook's Ad Library lets you search for ads by page, so you can look up the ads running from the fake page. Real pages are less likely to push unrealistic offers or deep discounts.

Protecting yourself from cloned websites involves vigilance and using online tools to verify authenticity.
Shop Directly Through Official Websites: Access a brand’s site by manually typing the URL or using trusted bookmarks instead of clicking on ads or social media links.
Look for Official Badges on Social Media: Verified brands on platforms like Facebook and Instagram display blue verification checkmarks next to their name, which can be a quick way to identify authenticity.
Install Browser Extensions for Security: Tools like “Facebook Pixel Helper” and “Google Tag Assistant” can help you investigate if a site is tracking data in ways that align with legitimate e-commerce practices.
Avoid Facebook Meta ads and Google ads links. 

Report Suspicious Sites: Most brands have a process to report fake sites. Reporting to platforms like Facebook and Google can help prevent others from falling victim.

Cybercriminals will continue to create cloned sites, but by following these strategies, you can protect yourself and others from becoming victims. Remember to double-check URLs, inspect site elements, and use verification tools when in doubt. For businesses, protecting your brand involves monitoring for fake versions of your site and reporting them to hosting providers or law enforcement to take them down.