{“lastseen”:”2026-05-19T14:05:07″,”description”:”Sometimes you spot posts on social media that make you wonder if any moderation takes place at all.\\n\\nWhich is concerning, because two**-** thirds of all online shopping scams now start on Facebook and Instagram. Online shopping scams are alarmingly common and have become one of the most frequently reported scam types in Australia. The Dutch police have also warned specifically about fake ads promising steep discounts.\\n\\nApparently, and this is an issue we’ve flagged before, social media platforms _could_ stop scams, but they don\u2019t because it hurts their revenue.\\n\\n## The Aldi meat box scam\\n\\nThis Facebook post immediately rattled my cage: \\n\\n\\n\\n\\nThis promotion is not from Aldi and is not endorsed by the company. A random account, which may be compromised or completely fake, posts:\\n\\n\\u003e \u201cMy son works at Aldi and told me about something almost nobody knows. To be honest, I thought he was joking at first. If you\u2019re over 40, you can get a meat box from Aldi for under $10. Sounds crazy, but it actually worked. They\u2019re clearing out excess stock and, instead of throwing it away, they\u2019re basically letting people have it for next to nothing. All I did was fill out a short form , I left the link in the comments in case it\u2019s useful to anyone. I signed up for my husband (he\u2019s 59 and loves a good steak), and when the box arrived, he opened it like it was his birthday. Everything looked fresh, neatly packed, and honestly there was more inside than we expected. It took me about a minute to fill out the form. If you\u2019re over 40, definitely give it a go , worst case you lose a minute, best case you get a great box of meat almost for free.\u201d\\n\\n* * *\\n\\n\\n\\n### Scam or legit? Scam Guard knows.\\n\\nTRY IT NOW\\n\\n* * *\\n\\nThere are several red flags here. Malwarebytes Scam Guard flagged:\\n\\n * **Unusual offer:** Promises of high-value products (\\”meat box from Aldi for under $10\\”) for an extremely low price are classic signs of scams, especially when they leverage well-known brands.\\n * **Anecdotal story:** The post uses a personal story (\\”My son works at Aldi\u2026\\”) to appear trustworthy and relatable, a common technique in social engineering.\\n * **Age restriction:** Arbitrarily targeting people over 40 is a psychological trick to make the offer feel exclusive and relevant.\\n * **External link:** The most common tactic is to provide a link in the comments rather than in the main post to avoid automatic detection by the platform.\\n * **Urgency and simplicity:** Encourages quick action with phrases like \\”took me about a minute,\\” downplaying any possible risk.\\n\\n\\n\\nAs it turns out, the possible risk, or \u201cworst case\u201d as the Facebook post calls it, is a lot worse than losing a minute of your time.\\n\\nThe link was posted as the first comment and used the link shortening service cutt[.]ly (and here’s why you should beware of those):\\n\\n\\n\\nThe first redirect sent me to a website where my device was fingerprinted using an embedded JavaScript before redirecting me to `https:\/\/gifts-survey[.]life\/click?key={identifier}`, a site designed to mimic the Aldi website. I had my VPN set to the US.\\n\\n\\n\\nThe scam page immediately creates urgency with messages like \u201conly 1 spot left\u201d and \u201cyou only have 2 minutes to complete the survey,\u201d trying to stop visitors from thinking things through.\\n\\nThe survey itself only asks basic questions, so there wasn’t much harm in clicking through it on my virtual machine.\\n\\n\\n\\nAs a reward, I got to pick three out of nine boxes to win a prize. I\u2019m happy to report that I \\”aced\\” that test.\\n\\n\\n\\nSo, I was forwarded to the scammers’ real goal. On the domain `hyperbargainsflow[.]shop`, visitors are prompted to enter payment details for their discounted meat box, plus an optional upsell for faster delivery.\\n\\n\\n\\nThe final page asks victims to hand over personal details, including their full name, contact information, and home address, along with payment details for the fake \u201cdelivery\u201d fee.\\n\\nThe site also uses tricks like more than 1,000 fake 5-star ratings and attempts to auto-complete and auto-submit the form if fields are detected as pre-populated. Saves you the trouble of submitting all your data yourself. Isn\u2019t that nice of them?\\n\\nWe found that similar campaigns have targeted Woolworths customers in South Africa and Australia using fake butcher profiles, and the Aldi angle has appeared in other countries as well.\\n\\n## How to stay safe\\n\\nIf a post promises a box of premium meat for the price of a sandwich, assume it is a scam until you can prove otherwise. \\n\\nThe same simple checks will help you avoid this Aldi meat box scam and the next look\u2011alike campaign that pops up tomorrow.\\n\\n * Sometimes scrolling past the enthusiastic, fake comments will reveal what real users are saying:\\n\\n\\n\\n * You can also help slow these scams down by reporting them. On Facebook, click the three-dot menu on the post and choose **Report post** \\u003e **Scam, fraud or false information**.\\n * If a deal claims to be \u201cknown only by insiders\u201d or \u201calmost nobody knows this,\u201d treat it as a red flag, not a perk. Real retailers advertise widely and on their own accounts. They don’t hide genuine promotions in badly written Facebook posts from throwaway accounts.\\n * Be wary of links posted in the comments. Scammers sometimes use that tactic to avoid automated scanning and reporting on the platform.\\n * Check the browser address bar carefully. Scam pages can copy a brand’s logo and colors perfectly, but the domain name usually gives the game away. \\n * Never enter card details, your full address, or your phone number into a site you reached via a random social post, especially if the offer feels too good to be true. If you already did, contact your bank or card issuer as soon as possible and monitor your statements.\\n * Secure your devices. Use an up-to-date, real-time anti-malware solution with web protection. Malwarebytes blocks connections to unsafe sites like these.\\n\\n![Malwarebytes blocks gifts-survey\\\\[.\\\\]life](https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2026\/05\/gifts-survey_block.png)Malwarebytes blocks gifts-survey[.]life\\n\\n**Pro tip:** Malwarebytes Scam Guard recognized the Facebook post as a scam and could have saved somebody\u2019s day.\\n\\n* * *\\n\\n****Let ‘s face it, an incognito window can only do so much.** \\n \\n**Breaches, dark web trading, credit fraud. Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance.”,”published”:”2026-05-19T12:46:13″,”modified”:”2026-05-19T12:46:13″,”type”:”malwarebytes”,”title”:”Facebook scam promises cheap Aldi meat boxes, steals payment info instead”,”source”:””,”references”:””,”id”:”MALWAREBYTES:41AD9829AEF641ADC1FD56909D5390E2″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/scams\/2026\/05\/facebook-scam-promises-cheap-aldi-meat-boxes-steals-payment-info-instead”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-05-19T14:05:07″,”description”:”Sometimes you spot posts on social media that make you wonder if any moderation takes place at all.\\n\\nWhich is concerning, because two**-** thirds of all…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-55523","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n