Amid the global tour of the world-famous K-pop group BlackPink, cybercriminals are taking advantage of heightened fan interest. Kaspersky experts have identified scam websites that closely mimic the group’s official merchandise store, putting users and their personal data at significant risk.
The scam works by creating a website that looks almost identical to the legitimate store, allowing users to browse merchandise, add items to the cart, and proceed to “checkout.” Victims are asked to provide personal and banking information, including email, full name, address, postal code, and payment details. Completing the fake checkout exposes users to financial loss and potential data theft.
“This is a common scenario: cybercriminals often exploit major concert events, especially limited merchandise releases where fans are eager to purchase quickly. We strongly advise users to verify online store legitimacy, avoid links from social media or unknown messages, and double-check URLs before entering personal or payment information,” says Olga Altukhova, Senior Web Content Analyst at Kaspersky.
How to Stay Safe
Kaspersky recommends the following precautions:
-
Verify online store authenticity: Always double-check URLs, brand name spellings, and ensure the site is an official retailer or authorized partner.
-
Shop on trusted platforms: Reduce risk of fraud and data theft by using reputable e-commerce sites.
-
Use reliable security solutions: Advanced security tools detect malicious websites and block phishing attempts. Kaspersky Premium achieved a 93% phishing detection rate in 2024–2025 AV-Comparatives tests with zero false positives.
-
Enable multi-factor authentication (2FA) and monitor accounts: Activate 2FA for payment services and online banking, and review statements regularly for unauthorized transactions.
By following these steps, fans can enjoy the BlackPink tour safely while protecting their personal information and finances.
