Personal Security

Suspicious Social Media Store? A Before-and-After Payment Response Guide

A practical decision guide for suspicious social-media stores, covering ad clicks, credential entry, card payments, bank transfers, and non-delivery.

If money has already left your account, contact the card issuer or bank before changing passwords. Ask about cancellation, transaction blocking, or recall options. Do not send another payment to obtain a promised refund.

Identify your situation first

  • Viewed the ad or opened the page without entering information
  • Entered contact or shipping details
  • Entered a password or one-time code
  • Paid by card
  • Sent a bank transfer or app payment
  • The item never arrived or the seller disappeared

If you only opened the page

A factory reset is not the first response when no file was downloaded and no credentials or payment data were entered. Close the page, review browser downloads, remove any notification permission granted to the site, and search for the seller and official domain independently.

If you entered personal or account information

Expect follow-up messages impersonating delivery, refunds, or customer support. If you entered a password, change it through the official app on a trusted device and replace every reused password. If you disclosed a one-time code, review active sessions and recovery methods, then sign out other devices.

If you paid by card

  1. Call the number shown in the issuer’s official app or on the card.
  2. Confirm the merchant name, amount, and available dispute or cancellation procedure.
  3. Ask whether the card should be blocked or replaced if its details were entered on a fake page.
  4. Preserve the ad, order page, receipt, seller conversation, and domain address.

If you sent a transfer

Contact the bank or payment service immediately through its official channel and ask whether the transaction can be stopped or recalled. Report the incident to your local law-enforcement channel. Preserve transfer records, account details, conversations, ads, and URLs.

If the product never arrived

A delay alone does not prove fraud, but a missed commitment combined with an unreachable seller warrants a payment dispute and evidence preservation. Stop if the seller demands extra tax, insurance, or redelivery fees before issuing a refund.

Do not

  • Share a verification code or install remote-control software for a refund
  • Delete transaction evidence before the dispute is resolved
  • Call a support number found in another search advertisement
  • Pay an advance fee to a third party promising recovery

Completion checklist

  • Verified the transaction through the issuer or bank’s official channel
  • Changed exposed and reused passwords
  • Reviewed active sessions and recovery methods
  • Preserved the ad, URL, order, payment, and conversation records
  • Rejected further payment and remote-control requests
  • Started a police report for monetary loss
  • Used the relevant national cyber-help channel for phishing assistance

Official routes reviewed on August 15, 2026 KST. Menus and dispute rights vary by payment method and jurisdiction; follow the latest instructions from the relevant institution.

Sources reviewed

  1. Are ads on social media vetted or checked for scams? Here’s what to knowU.S. Federal Trade Commission · Official source
  2. 사이버 범죄 분류—쇼핑몰 사기경찰청 사이버범죄 신고시스템 · Official source
  3. 피싱·스미싱 메시지 대응 및 118 상담 안내한국인터넷진흥원 보호나라 · Official source

SECUFOCUS NOW reorganized and analyzed the material above. This article does not replace the original sources.