ClickTok targets 18–34 demographic with fake discounts, crypto theft
Cybersecurity firm CTM360 has uncovered a new scam method called “ClickTok,” combining phishing and malware. It primarily targets users attempting to make purchases through TikTok Shop’s affiliate program.
Fraudsters attract victims through fake Meta ads and AI-generated TikTok videos that mimic real influencers. Users are then redirected to fraudulent domains that closely resemble legitimate TikTok Shop partner websites.
“These domains serve two main purposes: hosting phishing pages to steal user credentials and spreading trojanized apps,” the CTM360 report explains.
So far, over 10,000 fake websites have been identified. Although TikTok Shop operates in only 17 countries, victims are being targeted globally.
Fake discounts trigger irrational buying
Victims interacting with fake storefronts are manipulated using urgency tactics such as countdown timers urging immediate purchases. They are then asked to send cryptocurrency — typically Tether — to complete the transaction.
The offers seem "too good to be true" due to huge fake discounts. Scammers may even contact victims through WhatsApp or Telegram to build trust.
A growing fraud type involves “prepayment scams,” mainly targeting TikTok Shop affiliate participants. Victims are asked to "top up" fake crypto wallets with promises of commissions that never arrive, often supported by screenshots of fake earnings.
The scam mostly affects users aged 18 to 34, the most frequent TikTok users.
As we wrote, China blocks TikTok deal after U.S. raises tariffs