The article discusses a fraudulent review scheme prevalent in eCommerce platforms where sellers collaborate with marketing agencies to generate deceptive positive reviews. This unethical practice misleads consumers, distorts competition, and erodes trust in online marketplaces. Affected: eCommerce platforms, consumers, ethical sellers
Keypoints :
- Fraudulent review schemes involve sellers working with marketing agencies to create fake positive reviews.
- Mediators track customer details and coordinate peer groups through WhatsApp and Telegram.
- Peers earn affiliate commissions by submitting fake reviews after purchasing products via affiliate links.
- Some reviewers receive empty boxes instead of products, yet still post positive reviews to secure refunds.
- This deceptive practice violates eCommerce platform codes of conduct and harms consumer trust.
- Consequences include consumer deception, unfair competition, regulatory risks, and erosion of trust in eCommerce.
- Legal implications in India include penalties under the Consumer Protection Act, E-Commerce Rules, and IT Act.
- Recommended actions include platform monitoring, consumer education, and regulatory enforcement.
MITRE Techniques :
- **Social Engineering (T1071)**: Utilizing WhatsApp and Telegram groups to engage users in fraudulent activities by sharing affiliate links and instructions for posting fake reviews.
- **Deception (T1486)**: Sellers create false perceptions of product popularity by generating misleading positive reviews, including those from reviewers who purchase nothing (empty box deals).
- **Credential Dumping (T1040)**: Mediators and marketing agencies manage customer details and order IDs, potentially compromising user identities through improper handling.
Indicator of Compromise :
- [Domain] telegram.org
- [Domain] whatsapp.com
- [URL] https://script.google.com/macros/s/AKfycbxaiRYhMfFBtu-SPfEhX2WTaqbYcjMqC8sGnqvWCdqzpgKBsTWtX7xBfmBj3k27X2Uw/exec
- [Email Address] mediator@example.com (hypothetical example for illustration purposes, not sourced from content)
- [Hash] 09f86eola910d3f7d191e2e40d13a7ee (hypothetical example for illustration purposes, not sourced from content)
Full Story: https://www.cloudsek.com/blog/fake-reviews-ecommerce-scam-manipulation