Official warning

Criminals are taking over shopping accounts

Report Fraud has warned about a rise in criminals using stolen passwords to order expensive goods.

How it works

A password exposed in an earlier data breach is tried on a shopping account. If it was reused, the criminal can enter the account, place an order and collect it.

A message might say

You receive an order or collection message for something you did not buy, or notice unfamiliar activity in a retailer account.

Warning signs

  • An order, collection notice or password reset you did not request
  • A saved address, phone number or payment method has changed
  • The same password was used on more than one account

What to do

  1. 1Open the retailer's app or type its address yourself
  2. 2Change the password anywhere it was reused and switch on two-step verification
  3. 3Contact your bank immediately if an unfamiliar payment appears
Source: Report Fraud. Ward has rewritten the warning in plain language.