Medium riskOnline Shopping Scams

Order Cancellation Scam

After or even without a real purchase, you get an email or text saying there was a problem and your order was cancelled or needs payment re-confirmation. A link leads to a fake page built to capture your account login and card details.

Quick verdict

Risk level
Medium risk
Scam type
Order phishing scam
Main red flag
An urgent message about an order problem asking you to 're-confirm' payment or log in through a link.
What to do first
Do not use the link. Open the retailer's official app or website yourself and check your order history.

What this scam usually looks like

After or even without a real purchase, you get an email or text saying there was a problem and your order was cancelled or needs payment re-confirmation. A link leads to a fake page built to capture your account login and card details.

Example message pattern

Example pattern — not a real report
Example pattern: 'Your recent order #48217 was cancelled due to a payment issue. Re-confirm your details within 24 hours to avoid losing your item: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A message about a cancelled order you did not place, or do not recognise
  • Urgent deadlines warning you will lose the order or refund
  • A link to 'reconfirm payment' rather than checking your account directly
  • Requests for your full card number, login, or one-time security code
  • Sender address or web link that does not match the retailer's real domain

What to do

  • Open the retailer's official website or app and check your orders there
  • Compare the sender's email address against the retailer's genuine domain
  • Contact the retailer using a number or address from their official site
  • Report and delete the message, then block the sender

If you already clicked or replied

  • Do not enter any further details on the page
  • If you typed your login, change that password immediately and anywhere it is reused
  • If you entered card details, contact your bank to flag or freeze the card
  • Turn on two-factor authentication for the affected account

What not to do

  • Do not reply with payment or login details
  • Do not share one-time verification codes
  • Do not click 'unsubscribe' links inside the suspicious message

Similar scams

Medium risk Email

Fake Amazon Order Email

This scam emails a fake order confirmation for an expensive item, hoping you click a link or call a number to dispute a charge you never made.
High risk Email

Fake Refund Email Scam

This scam emails that you are owed a refund and asks you to confirm bank or card details, or to accept a refund that is really designed to steal your money.
Medium risk Email

Fake Invoice Email Scam

This scam emails an invoice or receipt for something you did not buy, hoping you call a fake 'support' number or click a link to dispute it.

Frequently asked questions

I got this but never ordered anything. Why?
Scammers send these messages in bulk hoping some recipients recently shopped online. A cancellation notice for an order you did not place is a strong sign of phishing.
The email has the shop's logo, so is it genuine?
Logos are easy to copy. Always verify by logging in through the retailer's official app or website rather than trusting branding in a message.
Why would a cancelled order need my card again?
Genuine retailers usually do not ask you to re-enter full card details by link. This request is commonly used to harvest payment information on a fake page.
What should I do if I already confirmed my details?
Contact your bank straight away to protect your card, change any reused passwords, and watch your statements for unexpected charges.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.