A fake shop can have attractive photos, good prices and reviews. Discovering a problem only after paying is too late. That is why we created the BOIT Rizikové E-shopy extension, which alerts you while browsing to domains listed as risky shops. We explain how it works, what it can warn you about and what the upcoming update will bring.

You come across an advert with a price that is hard to resist. The shop looks polished, a discount shines in your basket and the offer ends in a few minutes. That is exactly when it is easy to skip the question of who runs the shop and what happens if the goods never arrive. Our browser extension adds a useful pause at moments like these.

The most common tricks used by fraudulent online shops

A shop that disappears after payment. The seller lures you in with cheap goods, demands payment in advance and fails to fulfil the order. Sometimes the website later changes its address and the same scenario starts again.

An imitation of a familiar brand. A fraudulent website copies the logo, photographs and appearance of a real shop. The only difference may be its web address. The aim is to obtain a payment or card details.

An online shop with no clearly identified operator. Clear contact details, seller identification or information on complaints are missing. This does not automatically mean a crime is being committed, but if problems arise, it may be difficult to establish whom you are actually dealing with. Anonymous operators are specifically listed by the Czech Trade Inspection Authority as a reason for increased caution.

Pressure to decide quickly. An extreme discount, a countdown or a claim that it is the “last item” can push someone to pay without checking. These do not prove fraud on their own; combined with a request for payment by bank transfer and missing seller details, they deserve attention.

What the BOIT Rizikové E-shopy extension does

When you visit a website, the extension compares its domain with lists of risky shops maintained by the Czech ČOI and Slovak SOI. If it finds a match, it displays a prominent warning in your browser before you enter your address, phone number or payment details on the page. You can leave the page or continue at your own risk. The extension also flags certain suspicious features on the page itself, such as missing identification details, limited payment options or conspicuous discounts. Current version description in the Chrome Web Store.

According to BOIT's documentation, list checks take place locally in the browser: the list is downloaded to your device and the domain you visit is compared against it there. The goal is not to track where you shop, but to alert you at the right moment.

A warning is not a verdict, however, and its absence is not proof of safety. Lists cannot include every newly created fraudulent website. Nor does a risk listing alone automatically mean that a particular operator has committed fraud.

What we are planning for the new version

The upcoming version 1.9 is intended to add two more sources alongside the existing ČOI and SOI lists: a list of blocked domains maintained by ČTÚ and a public list of risky domains assessed by BOIT. The extension should then name the correct source of each warning. A domain on a blocked websites list should therefore not be presented as a “risky online shop” if the reason for the warning belongs to another category.

BOIT will publish its list with the reason for each domain's inclusion and the date it was added. This will be our expert preventive assessment, not an official ruling. Reports for investigation and requests to review a listing can be sent to BOIT. Changes to ČOI, SOI and ČTÚ records are the responsibility of the relevant authority.

The new version is also intended to refresh the lists regularly, allow manual updates and use the last available working copy if one source becomes unavailable. We are not yet promising these features as available to regular users: version 1.9 is awaiting publication in extension stores. Once approved, the update will reach users through the standard process.

Where to download the extension and what else to check

You can find the extension in our BOIT tools directory. You can also install it directly from the Chrome Web Store or Firefox Add-ons. The currently published versions use the ČOI and SOI lists; broader coverage will arrive with the release of version 1.9.

Even with the extension, check the website address, operator details, complaints procedure and payment method before paying. With an unfamiliar shop, take time to verify other customers' experiences outside its own website. If you have already paid and suspect fraud, contact your bank immediately and keep your order confirmation and correspondence. You can also submit a report for investigation to ČOI, or, for a Slovak seller, to SOI.

The extension will not decide where you should shop. But it can give you information you might otherwise look for only after the order has been paid for.

Back to all articles

Related articles

One password everywhere? Convenient for you, even more convenient for an attacker

A password for email, shopping, social media and banking. If the same one is used across several services, a single leak can open up multiple accounts at once. How do you create strong passwords, why store them in a password manager and when is BOIT's password generator useful? We have put together a practical guide without lectures about mandatory exclamation marks at the end.

Read the article

Are you chatting with a person on a dating site? Perhaps it is just a profile designed to make money

More than 4,700 fake profiles, at least 25,000 people in conversations and millions of messages over two weeks. Anthropic described a network of dating sites where AI posed as real people. We explain why these profiles are created, how operators and scammers make money from them and why people in Czechia face similar risks.

Read the article

GOG is coming to Linux. But what you keep after buying a game matters more

GOG has confirmed that it is working on Linux support for its Galaxy client. That is welcome news for gamers, but it also raises a broader question: can you really keep and run a digitally purchased game if the store or its servers disappear one day? We explain what DRM-free games offer, why simply having a title in your library is not enough, and what we know so far about the Linux version.

Read the article