Back to Fake Branded Account Login ScamPhishing

This is a version of Fake Branded Account Login Scam in Phishing.

Fake Trendyol login page asking for a username, phone or email, and a password

An English-language page at trendyolvip[.]shop uses the Trendyol name and orange branding and shows a "Welcome" card asking for a username, phone or email and a password, with Sign In and Register buttons, a Remember me box, and links labelled Terms and Conditions and Privacy Policy. It is not Trendyol's website. Whether anyone submitted credentials, and where they would be sent, were not established. The delivery channel is unknown. A capture associated with Myanmar is not treated as proof of targeting.

Fake Trendyol login page asking for a username, phone or email, and a password | Screenshot

What’s different in this version

These traits set this message apart from the usual pattern.

  1. The page uses the Trendyol name and orange colours, but it sits on trendyolvip[.]shop, which is not Trendyol's website.

  2. The form asks for a username, phone number or email, and a password, and offers Sign In and Register.

  3. No checkout, payment or further page after sign-in was captured.

  4. A capture was associated with Myanmar. That is not treated as proof of who the page was aimed at. The delivery channel is unknown.

Related scams

Other patterns in the same category, or that share a brand with this report.

How this scam works

  1. 1

    Step 1: A link or page uses a familiar company's name, logo or colours.

  2. 2

    Step 2: The address is not the company's real website, even when the brand name is part of the address.

  3. 3

    Step 3: The page asks you to sign in or register with a username, phone number or email, and a password.

  4. 4

    Step 4: Details entered on that page go to whoever set it up, not to the company being copied. The documented variation does not establish a completed sign-in.

✓ Do this

  • Open the real company's app or type its official website address yourself before signing in.
  • Look at the full web address, not only the logo or the colours.
  • If you already entered a password, change it on the real account from a device you trust.

✗ Avoid this

  • Do not enter your password on a page you reached from an unexpected link or a look-alike address.
  • Do not trust a login page because it uses a familiar name or colour scheme.
  • Do not reuse that password on other accounts if you already typed it in.

Verbatim excerpts from the scam

Exact lines from emails or messages—searchable text so you can compare wording.

  1. 1Excerpt 1
    trendyol
  2. 2Excerpt 2
    Welcome
  3. 3Excerpt 3
    Username / Phone / Email
  4. 4Excerpt 4
    Password
  5. 5Excerpt 5
    Remember me
  6. 6Excerpt 6
    I agree to the Terms and Conditions and Privacy Policy
  7. 7Excerpt 7
    Sign In
  8. 8Excerpt 8
    Register