Fake Pokémon card stores: How to spot this scam

How the fake Pokémon card store scam works

Scammers start by creating a fake online store that looks like a legitimate Pokémon TCG retailer. The site may use polished layouts, product images, card-shop styling, and business details that make it appear established.

Scammers promote these stores through paid ads on search engines and social media platforms, including Google, Instagram, and Facebook. A sponsored result only means someone paid to place the store there. It does not prove that the store is trustworthy.

The pressure often starts before checkout. Pokemon TCG products can sell out quickly, especially when a new set, rare card, booster box, or pre-order gets attention online. Fake stores may use messages like “limited stock,” “almost sold out,” or “pre-order now” to push you to buy before checking whether the retailer is real.

Once you land on the site, the store guides you toward checkout like a legitimate online retailer. The scam may continue after payment. Instead of sending the cards you ordered, the fake retailer may mail a thank-you card, a coupon, a cheap booster pack, or a small promotional item. That small delivery can make the store seem legit and delay you from disputing the charge while you wait for the actual order.

Red flags of a fake Pokémon card store

Fake Pokémon card stores can look convincing, especially when scammers copy the style of real retailers or pay for sponsored placements in search results and social media feeds. Before buying from a store you do not recognize, look for these warning signs:

• The store appears only in sponsored results. If you only find the retailer through ads or social media promotions, check whether real reviews, forum posts, or customer complaints appear elsewhere.
• The deal looks too good. Hard-to-find cards, booster boxes, or pre-orders sold far below the usual market price may be bait.
• The brand looks familiar but slightly off. Check the domain for misspellings, extra words, unusual domain endings, or names that imitate known retailers.
• Reviews are missing or hard to verify. Run a search using the store name alongside words like “review,” “scam,” “fake,” or “order never arrived.” If you only find the store’s own pages, ads, or social media posts, pause before buying.
• Contact details are vague. Be careful if the site only gives a contact form or a free email address, lists no real return address, gives vague shipping timelines, or uses refund and shipping pages copied from another retailer.

If a store displays several of these warning signs, leave the site and buy from an established retailer, official distributor, or marketplace with buyer protection instead.

What to do if you’ve already ordered

If you think you ordered from a fake Pokémon card store, act quickly. Save evidence and contact your payment provider before the scammer can charge you again or disappear.

• Contact your bank or card provider and ask about disputing the charge. If you entered card details on a suspicious checkout page, ask whether the card should be blocked or replaced.
• Save screenshots of the product page, checkout page, order confirmation, emails, tracking details, payment receipt, store URL, and any thank-you card or coupon you received.
• Check your bank statements for unfamiliar charges, small test payments scammers may use to check whether the card works, or repeat transactions.
• Report the ad, profile, or page on the search engine or social media platform where you found it.
• Change your password if you created an account with the fake store. Update other accounts, too, if you reused the same password.

How NordVPN can help

Fake Pokémon card stores can be hard to spot because they may look like ordinary online shops and appear in paid search or social media ads. A convincing page can push you toward checkout before you notice that the retailer, contact details, or offer do not add up.

NordVPN’s next-gen antivirus with scam, phishing, and malware protection can help block malicious websites in real time. You can also use NordVPN’s Link Checker to scan unfamiliar URLs before opening them.

Methodology

NordVPN’s Threat Intelligence team identified the fake store network by reviewing Google and Meta advertising transparency pages. These pages showed domains promoted through paid campaigns.

Researchers also compared repeated images and design elements across the stores and checked whether the same tracking tools, such as Google Analytics or Facebook Pixel tags, appeared on multiple sites. Tracking pixels and similar tools usually help website owners measure traffic and ad performance. When the same tracking tools appear across several suspicious stores, they can suggest that the stores are connected.