Hackers Abuse Shopping Apps to Push Fake Receipts and Support Number Fraud

Gen Digital documented a scam campaign that injects fake receipts into the Shop (Shopify) app’s order histories, impersonating major brands (Norton, McAfee, Apple, PayPal) and embedding phone numbers that prompt victims to call. Scammers use social engineering during those calls to steal credentials, payment information, one‑time codes, and in some cases convince victims to install remote access software; researchers found no evidence of a breach of Shop, Shopify, or the impersonated brands.