Vape shops are a favoured target for shipping fraud, for three structural reasons. The average order is high enough to be worth stealing, the products are age-restricted so there is a ready excuse for unusual verification demands, and buyers are used to paying by bank transfer rather than by card, which removes the chargeback they would otherwise have. It is worth knowing what protection each route gives you before you choose one — see how vape payments work.
Almost every scam in this space runs one of seven patterns, and each has a check that takes seconds. This guide is the buyer's version of that checklist. For the product-level equivalent, see our guide to spotting fake disposable vapes, which covers counterfeits rather than fraudsters.
The seven patterns
| Pattern | What it looks like | Quick check |
|---|---|---|
| Impossible pricing | Prices 40% or more below every other EU shop | Compare three reputable shops; fraud is priced to be irresistible |
| Off-platform payment | Asked to send money to a private name or by "friends and family" | A business must invoice you as a business |
| No company details | No legal notice, no address, no phone number | Look for the Impressum page required of EU traders |
| Courier fee phishing | A text or email after ordering asking for a small "customs" or "redelivery" fee | Couriers bill the sender; treat fee texts as hostile |
| Artificial urgency | Stock "reserved" for a short window, or pressure to pay within hours | Real stock does not expire in ninety minutes |
| No age verification | Checkout accepts anyone, no date of birth or ID check | Legal EU distance sellers must verify age |
| No history | Only a social page, domain registered weeks ago, no independent reviews | Check the domain age and look for reviews off their own site |
Pattern one: pricing that is too good
This is the most reliable single signal, because it is the one thing a fraudster cannot fake and stay profitable. Vape products have real costs: the device, the excise duty, the VAT and the shipping. A shop selling boxes at half the market rate is either not paying the duty, not shipping anything, or both.
That does not mean the cheapest legitimate price is a scam. Wholesale and multi-unit pricing genuinely reduces the per-unit cost, and our wholesale guide explains how volume tiers work. The pattern to distrust is a price that sits below everyone else's at every quantity, with no explanation of why.
Pattern two: off-platform payment
Fraudsters want a payment they can keep. That means a private bank account rather than a business one, a peer-to-peer transfer described as a payment to family or a friend, or a request to move the conversation to a messaging app where there is no record.
A legitimate EU trader invoices you in the business name, on the business account, with a VAT number where applicable. If an EU shop offers SEPA transfer, the account holder should be the company, not an individual. Our note on paying for a vape order by SEPA transfer sets out what a proper transfer looks like, and the consumer protections that still apply.
Pattern three: no verifiable company details
EU traders selling to consumers are required to publish a legal notice: a name, a geographic address and a contact channel. Its absence is not a technicality. It is the difference between a business you can enforce a right against and a website that can vanish.
Check the address exists, check it is not a residential flat used for dozens of domains, and check the contact channel is more than a web form. A shop with a Berlin warehouse address, a working phone number and a registered company name is a shop you can hold to the rules described in our guide to your rights when a parcel is damaged or missing.
Pattern four: the fake courier fee
One of the most common attacks arrives after a legitimate order elsewhere, because the phishing text does not need the fraudster to have your order at all. It only needs your phone number. The message claims a parcel is held pending a small customs or redelivery fee and links to a payment page.
The rule that defeats this one entirely: any genuine charge on your order is stated at checkout, and carriers bill the sender rather than the recipient for delivery services. Our explanation of how EU import VAT and customs actually work on vape parcels covers who may legitimately charge you and when. If a message asks for a payment to release a parcel, treat it as hostile and do not click.
Pattern five: manufactured urgency
Pressure removes the time in which you would normally check. A countdown clock, a claim that stock is held for a limited window, or an insistence on payment within hours is a technique rather than a customer-service style. Legitimate retail does not need it, because stock levels and dispatch windows are stated plainly, as they are in our explanation of how orders are packed and shipped.
Pattern six: no age verification
Age verification is a legal obligation for anyone selling nicotine products to consumers in the EU, not an optional feature. A shop that lets anyone check out without establishing that the buyer is an adult is either not a real trader or not a compliant one, and both are reasons to walk away.
The German regime is the strictest version of this, and sellers based abroad who ship into Germany must register and describe their age-verification process. Our guide to age verification for online vape sales in Germany explains what a compliant checkout must do. Its absence is a compliance red flag, and in an unregulated shop it usually sits alongside counterfeit stock.
Pattern seven: no verifiable history
Fraud sites are built to be abandoned. That shows up as a domain registered in the last few weeks, no independent reviews anywhere except on its own pages, stock photography instead of real product images, and a social page with followers but no long history of customer replies.
Registry lookups are free and instant. A shop that has been trading for years under the same domain, with reviews that predate your visit, is a fundamentally different proposition from one that appeared last month.
The two-minute check before you order
- Read the legal notice and confirm a real address and company name exist.
- Compare the price against two other EU shops at the same quantity.
- Confirm the payment goes to a business account in the business name.
- Confirm the checkout verifies age.
- Check the domain age and look for reviews away from their own site.
- Confirm there is a stated dispatch window and returns policy.
Any single failure is worth a question. Two failures is a shop to avoid, because the checks are cheap for a real business to pass and expensive for a fraudster to fake.
If you have already paid
Act quickly, because the window to recover a transfer narrows fast. Contact your bank the same day and ask about a recall of the payment, report the site to your national consumer authority, and gather the evidence that matters: the order confirmation, the payment details, the screenshots and the tracking number if one was issued. A tracking number that never scans is itself evidence, as explained in how to track a vape order.
Going forward, the simplest protection is to buy from stock that is already inside the EU customs union, where the seller is identifiable and the goods have cleared. That is what the EU warehouse range is for, and our buying guides list what to look for in a supplier. Buying vapes online is legal across most of the EU, as our guide to buying vapes online in Germany sets out, and the legal route is the one with enforceable rights attached.
Frequently asked questions
How do I know if a vape shop is legitimate?
Start with the legal notice: a real company name, a physical address and a reachable contact. Then check the price against the market, confirm age verification at checkout, and confirm payment goes to a business account.
Is paying by bank transfer safe?
It is safe when the account holder is the company you are buying from and the order is invoiced properly. It becomes unsafe when it is a private name, a peer-to-peer transfer, or a request to move to a messaging app.
I received a text about a customs fee. Is it real?
Treat it as fraudulent. Couriers bill the sender, and any legitimate charge on your order appears at checkout. Do not click the link, and do not enter payment details.
Can I get my money back if a vape shop is a scam?
Recovery depends on the payment method and speed. Contact your bank immediately, report the site to your consumer authority, and keep every message. Bank transfers are harder to reverse than card payments, which is a reason to prefer a seller who offers card or an invoiced business transfer.
The short version
Vape shipping fraud runs a small number of patterns: impossible prices, off-platform payment, missing company details, fake courier fees, artificial urgency, no age verification, and no trading history. Each one has a cheap check, and two failures should end your interest. The strongest single protection is buying from identifiable sellers with stock inside the EU, because that is the version of online vape retail where consumer rights actually attach. For the rest of the buying process, from device choice to delivery, work through our buying guides.
