Watch out for Lidl's "extremely low prices": fake websites with strange domains capture data and allow fraudulent charges

The OCU warns of a campaign that impersonates Lidl on the internet and WhatsApp with fake offers. They redirect to pages that imitate the official website to steal data and cause charges.

09 of may of 2026 at 10:22h
Watch out for Lidl's "extremely low prices": fake websites with strange domains capture data and allow fraudulent charges
Watch out for Lidl's "extremely low prices": fake websites with strange domains capture data and allow fraudulent charges

The Organization of Consumers and Users has issued an alert for a fraudulent campaign that impersonates Lidl. The scammers seek to steal money and personal data through false offers distributed on the internet and WhatsApp.

The National Cybersecurity Institute has detected advertisements and messages that use the chain's corporate image to simulate promotions with extremely low prices. Cybercriminals redirect victims to fraudulent web pages that replicate the official colors, logos, and designs.

Errors in the url betray the scam

These fake platforms aim to provoke impulsive purchases by taking advantage of consumer trust in the brand. The web addresses usually present spelling errors, strange domains, or do not end in .es or .com. In addition, they use urgency messages to pressure the user and prevent them from analyzing the legitimacy of the site.

The introduction of bank details on these pages allows criminals to make fraudulent charges. They can also sell the stolen information on illegal markets. Experts advise performing periodic searches of one's name or email address on the internet to detect misuse of personal information.

"Save screenshots and report the case to the National Cybersecurity Institute if the page was accessed without purchasing" - Organization of Consumers and Users, consumer defense entity

The entity recommends blocking the suspicious link immediately if no transaction has been completed. This measure helps prevent future access attempts or targeted phishing.

Fraud Response Protocol

In case of having made a purchase or provided banking details, the priority is to contact the banking entity. The objective is to block suspicious movements and change online banking access passwords.

Subsequently, it is mandatory to file a report with the State Security Forces and Corps. This step formalizes the investigation of the crime and facilitates the possible recovery of the stolen funds.

About the author
Redacción
See biography