Scam library · Shopping · Banking & payment apps
Fake store 'card declined, try another card' scam
You find a great holiday deal through an ad, fill your cart and type in your card. The checkout page says your payment was declined, or that there were insufficient funds. Please try a different card. So you do.
On a fake store, that 'declined' message is the trick. In late October 2026 the Better Business Bureau warned holiday shoppers about this 'double payment credit card trap': the site isn't declining anything, it's collecting every card you enter.
What the message looks like
From: Checkout page on holiday-megadeals-outlet[.]shop
Subject: Payment failed
Your payment could not be processed: insufficient funds (code 51).
Please use a different credit or debit card to complete your order. Your cart is reserved for 10:00 minutes.
How this scam works
Scammers use social media ads and search engine ads to send shoppers to websites that impersonate familiar retailers, the BBB says. The site can look just like the real store. The difference may be one extra letter or a small change in the web address.
At checkout, the site shows an error and asks for another card. There was never a real payment. The first card number is already captured, and the second one is a bonus. The BBB says these sites use the card details and other data for identity theft and credit card fraud. Shoppers may also never get the item, or get something very different from what was shown.
Old tips like spotting bad grammar don't work as well anymore. The BBB says AI makes fraudulent sites harder to identify, and a padlock or 'https' in the address bar doesn't prove a seller is real, because scam sites can have one too.
The timing isn't an accident. Holiday rushes make everyone hurry, and the BBB notes that last-minute shoppers tend to skip the research. A fox checks the trail before following it, and a few minutes of checking here can save two cards' worth of trouble.
Red flags
- A 'declined' or 'insufficient funds' message, followed right away by a request for a different card.
- You reached the store by clicking a social media ad or a sponsored search result.
- The web address has an extra letter, an extra word or a small difference from the real retailer's address.
- No business name, street address or contact information you can check.
- Prices far below every store you know, plus a countdown timer.
How to tell it’s fake
- Close the ad and type the retailer's address yourself instead of clicking.
- Search the store's name with 'scam' or 'complaint' and check its record at BBB.org.
- If you get a 'declined' message, don't enter another card. Check your card's app or call the number on the back of the card to see if a charge really failed.
- If a deal seems legit but you're not sure, get a scam expert's second opinion before you pay.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- Leave the site, and don't enter any more card numbers.
- If you created an account there, change that password anywhere else you used it.
If you paid
- Call every card issuer whose card you entered, not just the first one, and ask to cancel the cards and dispute any charges you don't recognize.
- Watch your statements for small 'test' charges, and report the site to BBB Scam Tracker and ReportFraud.ftc.gov.
If you shared personal info, a password or a code
- If you entered your address, phone or email too, expect follow-up phishing about 'your order' and don't click links in it.
- If you shared more personal details, visit IdentityTheft.gov.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
When you shop in Chrome or Edge on your computer, Scam Guard checks the store you're on: how new the site is, whether its address imitates a known retailer, and whether checkout looks like a fake store. It warns you before you type card details, in plain words. On a phone app or another browser, it can't see the page.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- Can a real store say my card was declined?
- Yes, real declines happen. But a real store isn't trying to collect several cards. Check with your card company before trying another card, especially on a site you reached through an ad.
- The site had a padlock and https. Isn't that safe?
- No. The BBB says scam sites can use encrypted connections too. The padlock means the connection is private, not that the seller is honest.
- I entered two cards. What now?
- Call both card issuers right away using the numbers on the backs of the cards. Ask them to cancel the cards and watch for fraud.
- How do I shop safely during the holidays?
- Type store addresses yourself, pay by credit card, check unfamiliar sellers on BBB.org, and give yourself time instead of buying in a rush.