The skyrocketing popularity of Labubu dolls has triggered a wave of scam websites targeting enthusiastic collectors worldwide, with cybercriminals deploying fake online shops in multiple languages to steal payment details. Kaspersky detected hundreds of fraudulent platforms, often posing as legitimate retailers, that entice fans with fake offers on Labubu dolls to harvest sensitive financial information from unsuspecting buyers.
Labubu dolls, quirky plush collectibles designed by Hong Kong artist Kasing Lung and sold by Pop Mart stores in “blind boxes,” have captivated global audiences. Buyers do not know which specific doll or design they’ll get until they open it. This element of surprise, combined with the chance of getting rare or limited-edition figures, fuels the excitement and collectible frenzy.
Since April 2024, the hype multiplied, fueled by high-profile celebrity endorsements, leading to resale prices for rare dolls reaching $3,000 and above. This has created a fertile ground for scammers, who exploit the urgency and excitement surrounding these coveted toys.
A scam website claims to
sell “Labubu originals” and describes the story behind the creation of Labubu
dolls. Multiple figures are offered at “special prices”
ranging from $30 to $79.99
Cybercriminals create counterfeit websites in multiple languages to deceive buyers in different regions. These fake shops often mimic the branding of trusted retailers, offering discounts or “exclusive editions” of dolls to lure victims into entering bank card details or other personal information. Pop Mart is the official retailer and creator of Labubu dolls, and scammers mimic its appearance to trick buyers into thinking they are purchasing authentic products.
A phishing website in UAE
“Scammers are leveraging the Labubu hype with scam sites and urgent calls-to-action that prey on fans’ eagerness to snag rare dolls. These fraudulent platforms are now appearing in multiple languages, which broadens their reach. Fans are strongly advised to purchase Labubu dolls only from verified retailers like Pop Mart’s official channels after double-checking the website’s URL for authenticity, and avoid interacting with websites that seem suspicious,” comments Olga Altukhova, Senior Web Content Analyst at Kaspersky.
