More Than 1,000 Fake Gift-Card Giveaways Are Impersonating PlayStation, Walmart and Other Trusted Brands
CTM360 says it has identified more than 1,000 incidents in a gift-card scam campaign that uses fake social ads, celebrity identities and cloned reward pages for brands such as PlayStation, Google Play, Sephora, SHEIN and Walmart. The promised cards do not arrive; personal data, unwanted apps and paid sign-ups do.
The ad looks like a brand you already trust. A familiar logo, a celebrity smiling next to a gift-card balance, a short deadline to “claim your reward.” One tap later you are on a page that asks you to prove you are human, finish a survey or start a free trial. The card never shows up. Something else does: your details, an app you did not mean to install, or a subscription that starts billing your phone or card.
That is the pattern CTM360 describes in its report on fake gift-card rewards and brand impersonation. The firm says it has identified more than 1,000 incidents linked to a widespread campaign that uses trusted brands, celebrity identities and fraudulent social-media advertisements to lure people with promises of free rewards.
How the lure is built
According to CTM360, the campaign impersonates well-known names including PlayStation, Google Play, Sephora, SHEIN and Walmart. Victims are sent to fake reward portals and asked to complete surveys, verification steps or subscription offers. Instead of the promised gift cards, they risk exposing personal information, installing unwanted applications or signing up for paid services.
The report frames this as more than a string of one-off phishing pages. CTM360 points to an affiliate-based monetization model sitting behind the fake giveaways: the people building the ads and cloned portals get paid when a victim completes a survey, installs software or starts a paid offer. That business model is why the same trick keeps returning under new brand names and new celebrity faces. The company says the report also walks through the campaign’s attack chain, the look of the deceptive reward templates, and warning signs that both consumers and organizations should recognize.
Why companies, not only shoppers, should care
When a scam borrows your brand, customers who get burned often blame the company whose name was on the ad. Support lines fill up. Trust drops. And the personal data collected on a fake reward page—names, emails, phone numbers, sometimes enough to attempt an account reset—can be reused against the same people later. Brands that sell gift cards or run loyalty programs are especially exposed, because customers already expect those promotions to arrive through social ads.
What this means for your company
If you sell online, issue gift cards or advertise on social platforms, assume someone will eventually wrap your name around a fake reward. Tell customers, in plain language, that you will not ask them to complete a survey or install an app to receive a gift card. Give people a single place to check whether a promotion is real. Watch for look-alike domains and ads that use your branding, and make it easy for customers to report them. On the employee side, the same fake-reward pages are a common way staff give up personal data that later becomes a work-account problem. A short “we do not run pop-up gift-card giveaways” note on your site is inexpensive; rebuilding trust after your logo appears in a scam is not.
Worried that scam ads are using your company’s name to collect customer data? Reach out to Layer 7 Data Solutions to discuss how we’ve helped companies similar to yours.
About The Author
