InfoHawk flags fiveguys-us.com Five Guys ordering clone
InfoHawk's Scamwich research names fiveguys-us.com as a Five Guys ordering clone that proxies the real menu and steals card details and bank SMS codes. Five Guys is not involved.
- First reported
- Reports
- 1
Source: news.lavx.hu · published
What happened
LavX News reported on 7 November 2026 on research by InfoHawk into a campaign it calls Scamwich, a network of 820 domains impersonating 35 U.S. restaurant chains to skim payment details. InfoHawk named fiveguys-us[.]com as a Five Guys lookalike previously hosted with wingstop-delivery[.]com on 63.143.44.131 (Limestone Networks). The domain is not operated by Five Guys, and Five Guys is not involved.
How the scam works
According to the research, the kit reverse-proxies the real restaurant's online ordering site, so menus, prices and the shopping cart load live and look exactly right. Only the final step is replaced: instead of the restaurant's own checkout, the visitor sees a malicious payment form that captures the card number, expiry date and security code and then asks for the verification code that the bank sends by SMS. With both the card details and the one-time code, criminals can complete purchases that look authorised. No food order is ever placed.
InfoHawk also documented Google Search ads pushing look-alike domains, many on the .delivery extension, so a hungry customer who clicks the first sponsored result can land on a clone without noticing. Adding a country tag such as -us to the brand name makes fiveguys-us.com look like a regional official site. Because the content is pulled from the genuine site, visual checks such as logos or menu photos do not help; the only reliable signal is the domain in the address bar.
Order only through the official Five Guys app or a website address you type yourself, and avoid ordering through sponsored search results. Never type a bank SMS code into a restaurant checkout; banks send those codes to approve a payment in their own app or page. Anyone who paid on fiveguys-us.com should contact their card issuer at once to block the card and dispute charges. The details come from the LavX report on InfoHawk's research and have not been independently checked by scammers.com.
Source
LavX News report on InfoHawk research, 7 November 2026: https://news.lavx.hu/article/researchers-uncover-820-fake-restaurant-domains-in-payment-skimming-campaign
Red flags
- A Five Guys ordering site on an address such as fiveguys-us.com rather than the official domain.
- A sponsored search result for food ordering that leads to an unfamiliar domain.
- A checkout that asks for the bank SMS verification code.
- A menu and cart that look perfect but a payment page that looks different from usual.
- No order confirmation or delivery after paying.
If you were targeted
- 1Order through the official Five Guys app or a web address you type yourself.
- 2Skip sponsored search results when ordering food online.
- 3Never enter a bank SMS or one-time code on a restaurant checkout page.
- 4If you paid on a lookalike site, call your card issuer to block the card and dispute charges.
- 5Report the site to the restaurant and to Google if you reached it through an ad.