Not cool: the air conditioning scams offering fake deals in the heatwave

Cybercriminals are exploiting the UK heatwave by building fake retail websites, including a sophisticated replica of Aldi’s online store, to harvest shoppers’ payment details and personal data, cybersecurity firm Kaspersky has warned [1]. The fraudulent sites, uncovered by Kaspersky researchers, mimic genuine retailers and pressure visitors into impulsive purchases by displaying low-stock warnings and countdown timers on heavily discounted air-conditioning units [1]. One listing on the fake Aldi page offered an “energy efficient” air conditioner and heater set for £28.13, claiming a reduction from £64.44, while a 3-in-1 portable unit was priced at £149.99, supposedly marked down from £474.99 [1]. “When demand spikes, warnings that only a few items are left or that a discount is about to expire can easily compel users to enter financial details or personal data,” said Olga Altukhova of Kaspersky [1]. The scam pages replicate Aldi’s logo, product imagery and layout, and display the number of visitors viewing each item alongside a time-limited special price [1]. Aldi stated it works to identify and report counterfeit domains, noting that legitimate offers appear only through its official website and verified social media accounts [1]. Kaspersky, which has previously partnered with organisations such as the esports group Sangal Esports in 2020, advises consumers to verify a site’s URL and design before entering any information [4][1]. Altukhova recommended using a search engine to confirm a retailer’s authenticity or relying on security software to perform checks [1]. The UK’s year has already been marked by significant events, including the coronation of King Charles III in 2023, but the current heatwave has created fresh opportunities for fraudsters targeting consumers seeking relief from record temperatures [3][1]. Anyone who suspects they have disclosed financial details is urged to contact their bank immediately, report the fraud and change their passwords [1].