Buy Now Pay Later Scams: Klarna, Afterpay, and Affirm Fraud

Buy now, pay later scams exploit services like Klarna, Afterpay, Affirm, Zip, and PayPal Pay in 4 in two directions at once: scammers phish or take over consumers' BNPL accounts to shop on other people's credit, and they build fake stores that accept BNPL to make fraudulent purchases feel safe. Klarna, Afterpay, and Affirm are legitimate, regulated companies — the fraud happens around them, through fake sign-in pages, "payment failed" texts, and hijacked accounts. Because BNPL splits charges into small installments and consumer protections are historically weaker than credit cards', fraud can run quietly for weeks before victims notice.

Why BNPL Is Attractive to Scammers

• Frictionless signup is frictionless fraud. The same instant approval that makes BNPL convenient makes it easy for a scammer with your leaked personal data to open an account in your name.
• Small installments hide theft. A stolen card triggers a $500 alert; a hijacked BNPL account generates four quiet $31.25 charges that blend into bank statements.
• An installment plan feels like vetting. When a shady store offers "4 easy payments with Klarna," shoppers assume the BNPL brand endorses the merchant. It usually does not work that way — some integrations, like one-time virtual cards, let almost any store accept BNPL without meaningful vetting.
• Protections vary. Dispute rights for BNPL purchases have historically been weaker and less standardized than credit card chargeback rights, though US regulators have moved to extend card-like dispute protections to BNPL. Resolution still tends to be slower and less predictable.

The Four Main BNPL Scams

1. Fake sign-in pages. You search "Klarna login" and click a sponsored result, or tap a link in a text, and land on a pixel-perfect copy of the real sign-in page on a lookalike domain. Enter your credentials and the scammer immediately logs into the real service and starts shopping. This is standard credential phishing wearing a BNPL costume — the same anatomy covered in our phishing scams hub. Always type the address yourself or use the official app.
2. "Payment failed" phishing texts and emails. "Klarna: Your installment payment of $42.50 failed. Update your payment method to avoid late fees: [link]." These work because BNPL users genuinely juggle multiple payment schedules and dread late fees. The link leads to a credential- and card-harvesting page. Real payment issues will always be visible when you open the app yourself — never through the link in the message.
3. Account takeover. Using credentials from data breaches (people reuse passwords) or phished logins, fraudsters access existing BNPL accounts, sometimes change the delivery address or generate virtual card numbers, and buy electronics and sneakers on your payment plan. Victims often discover it only when a missed-installment notice or collections email arrives for something they never bought.
4. Fake stores that take BNPL. A social media ad offers a $900 e-bike for $180, and the checkout proudly displays Afterpay and Klarna logos. The BNPL checkout may even be real — but the merchant ships nothing, or ships junk. You are then contractually paying installments for a product that never arrived while you fight a not-as-described dispute. The BNPL logo is being used exactly like a fake trust badge. Judge the store, not the payment buttons — our shopping scams hub covers how.

Red Flags to Act On

• Any BNPL link that arrives by text or email. Handle every payment issue inside the official app or by typing the site address yourself.
• A login page whose domain is not exactly klarna.com, afterpay.com, or affirm.com. Hyphenated or extended domains ("klarna-secure-login") are phishing.
• Installment charges you do not recognize on your bank statement — especially small, repeating ones from a BNPL provider you may not even use.
• A dramatic discount plus BNPL logos on an unknown store. The payment options do not vouch for the merchant.
• Emails about a new BNPL account you never opened. That is identity fraud in progress — respond immediately, through official channels only.

How to Protect Yourself

1. Use unique passwords and enable every security option (2FA, passkeys, app PIN) your BNPL provider offers. Reused passwords are the number-one takeover vector. And never read a verification code to anyone — see our verification code scam guide.
2. Turn on notifications for every purchase and payment. Instant alerts turn weeks of silent fraud into a same-minute discovery.
3. Vet the store before caring about the payment method. Check the domain's age and reputation before buying from any unfamiliar site.
4. Fund BNPL with a credit card where the provider allows it, adding a second layer of dispute rights on top of the BNPL provider's process.
5. Review statements for small recurring charges from Klarna, Afterpay, Affirm, Zip, or Sezzle that you cannot match to a purchase.

If You Have Been Hit

Move in this order: lock or freeze the BNPL account and change its password; report the fraudulent orders to the provider's fraud team through the official app or website; dispute related charges with your bank or card issuer; and if an account was opened in your name, place a fraud alert or credit freeze with the credit bureaus and file at reportfraud.ftc.gov. Keep records of every report — BNPL disputes can take persistence, and a written paper trail is what forces slow processes to a resolution.

Before you tap a "payment failed" link or check out at an unfamiliar BNPL store, paste the message or URL into IsThisAScam.to. The free analyzer checks the domain, the language, and known scam templates in seconds — no signup required.

Received something suspicious? You can check if an email is a scam in seconds with our free 6-layer scanner. Read our full guide to phishing scams for tactics, examples, and reporting steps.