Hudabeautyjapan.com flagged as copycat store borrowing Huda Beauty branding (not the real Huda Beauty)
MalwareTips calls Hudabeautyjapan.com a fake copycat store that borrows Huda Beauty branding; Huda Beauty is not involved. The domain dates from January 2026 and scores 18/100 (Dangerous).
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips published an investigation on 17 October 2026 calling Hudabeautyjapan.com a fake copycat store. It says the site takes its products, photos and branding from genuine brands and stores but is not run by any of them. The domain name trades on the genuine Huda Beauty cosmetics brand; Huda Beauty is not involved and does not operate this site. According to the report, the domain was registered on 3 January 2026, and the MalwareTips URL scanner gives it a Safety Score of 18/100, rated Dangerous. MalwareTips describes the pattern as sponsored posts on Facebook, Instagram or TikTok using borrowed images, steep discounts (for example $39 for items that normally cost $180) and countdown or 'closing sale' banners. It says buyers of such stores often get nothing, a knockoff or an unrelated item, or later see unauthorised card charges. MalwareTips advises not to shop at the site or enter card details there.
How the scam works
MalwareTips says the scheme follows a script copied across hundreds of copycat stores. A sponsored post appears in a Facebook, Instagram or TikTok feed using images and videos borrowed from real stores and brands, usually with an urgent hook such as an anniversary sale, a warehouse clearance or "we're closing our stores". Comments may be turned off or filled with quick, glowing replies. The site copies product photos, descriptions, menus and "free returns" badges, but a business name, address and working customer service are usually missing or lead nowhere.
At checkout, countdown timers, "only 3 left" badges and "12 people are viewing this" pop-ups push buyers to pay before they look closely, while bundles and free-shipping thresholds raise the basket. After payment a normal-looking confirmation email arrives. A tracking number may follow about a week later but often stays on "label created" or shows delivery in the wrong city, while the card's dispute window runs down. If anything arrives it is usually a cheap copy shipped from overseas; some stores mail a cheap, unrelated item so tracking shows "delivered" and can be used against a refund claim. Support then stalls, or offers a 20% refund to keep the item or a return to China at the buyer's cost.
Source
MalwareTips, "Hudabeautyjapan.com EXPOSED - Fake Store Or Real? Read First" (published 17 October 2026).
Red flags
- A domain that adds a country or word to a brand name (here 'hudabeautyjapan') but isn't the brand's official site.
- A store address that isn't the brand's own website or a retailer the brand lists.
- Discounts of 70% or more across the whole catalogue (for example $39 for an item that normally costs $180), with countdown timers or 'closing sale' banners.
- No registered company name, tax number or physical address in the footer, terms or imprint page.
- Support limited to a contact form or a generic email address, with no phone number or local return address.
- Refund, shipping and privacy pages copied from another shop, or returns that must go to China at your cost.
- Five-star reviews that can't be found anywhere else online.
If you were targeted
- 1Don't buy from the site or enter your card details at its checkout.
- 2Find Huda Beauty's official website through your own search and buy there or from retailers it lists.
- 3If you already paid, call your bank or card issuer and ask for a chargeback; disputes have time limits, often around 120 days. If you paid with PayPal, open an 'item not received' or 'significantly not as described' dispute (generally within 180 days).
- 4If you typed in your card number, ask for a replacement card, turn on transaction alerts and watch for small test charges.
- 5Keep the order email, tracking number and screenshots of the product page.
- 6Ignore follow-up 'customs fee' or 'address update' delivery texts, and change any password you reused on the site.
- 7Report the ad to the platform where you saw it and, in the U.S., file a report at ReportFraud.ftc.gov (econsumer.gov for cross-border purchases).