How to Spot Fake AI App Clones and Scam Payment Pages

Every popular AI product attracts imitators. Some are harmless “wrapper” apps that resell access to someone else’s model. Others are built to take a card payment and disappear, or to harvest a login.

This guide explains the warning signs we look for when we research an AI product, and gives you a checklist you can run in about five minutes before you type in card details. It is based on published guidance from consumer-protection agencies and the two big app stores. It is not a hands-on investigation of any specific scam site.

Why AI tools are an easy target for clones

Three things make AI products attractive to copycats:

• Hype and urgency. New features launch fast, and people search for them before the official app is available in their country or on their device.
• Familiar subscription prices. A monthly charge of a few dollars or pounds looks normal for an AI tool, so a fake checkout does not raise eyebrows.
• Similar names. Many AI brands are short, generic-sounding words, which makes lookalike domains and app titles easy to register.

The FTC lists the classic scam pattern as impersonation of a known company, a problem or prize that needs action, pressure to act fast, and a demand to pay in a specific way. An “AI premium unlock” page that hits all four is a red flag regardless of how polished it looks.

Lookalike domains: how to check the address

The address bar is your best single defence. Clone sites usually rely on one of these tricks:

The FTC’s phishing advice is simple and applies here: if you have an account with a company, contact it through a website or phone number you know is real, not the link in a message. Apple’s support guidance adds that a link whose web address does not match the company’s site is a phishing warning sign.

A practical habit: find the official address once, from the company’s own documentation or verified social profile, and bookmark it. Then always start from the bookmark.

Check the domain’s age with ICANN Lookup

A domain registered last week that claims to be a well-known AI brand deserves suspicion. You can check registration dates for most generic domains through ICANN’s lookup tool at lookup.icann.org. ICANN says its RDAP-based Lookup service is now the definitive source for this registration data, replacing the older WHOIS services.

Keep the limits in mind:

• A young domain is a warning sign, not proof of fraud. Legitimate companies launch new sites too.
• An old domain is not proof of safety. Expired domains get re-registered by new owners.
• Some country-code domains are not covered in the same way, and owner details are often redacted for privacy.

Treat domain age as one input among several.

Fake app-store listings

Both major stores have rules against copycats. Apple’s App Review Guidelines say developers should not copy a popular app or “make some minor changes to another app’s name or UI and pass it off as your own”, and that apps impersonating other apps or services may lead to removal from the developer program. Google Play’s Impersonation policy bans names or icons so close to an existing product that users may be misled, and bans falsely claiming to be the “official” app of an established entity.

Rules do not mean every clone is caught before you see it. Before installing an AI app, check:

1. The developer name. Tap through to the developer page. Does the name match the company that runs the official website?
2. The developer’s other apps. A publisher with dozens of unrelated “AI” apps in different niches is a pattern worth noticing.
3. The website link on the listing. It should point to the official domain you bookmarked.
4. Recent reviews, sorted by newest. Look for complaints about unexpected charges or about the app not being the product it claims to be.
5. What the subscription actually buys. Apple’s guideline 3.1.2(c) says apps should clearly describe what the user gets for the price before asking them to subscribe. If the listing or paywall is vague, slow down.

Apple’s own support advice is to download software only from trusted sources such as the App Store or the developer’s official website. Third-party download sites offering a “free premium” version of a paid AI app are worth avoiding entirely.

Payment page red flags

Even on a real-looking domain, the checkout page can give a scam away. Watch for:

• Unusual payment methods. The FTC lists cryptocurrency, wire transfers, payment apps and gift cards as methods scammers ask for. A legitimate AI subscription almost never needs a gift card.
• A countdown or “last chance” price. Pressure to act fast is on the FTC’s list of scam signs.
• No clear renewal terms. You should be able to see the price, the billing period and how to cancel before you pay. See our guide to cancelling an AI subscription for what good terms look like.
• A request for your password or a one-time code. Apple states it will never ask for your password, passcode or two-factor codes. The same principle applies to any reputable service.
• A checkout hosted on a different domain from the one you started on, with no recognisable payment provider.

Worked example: the “unlock pro” pop-up

Imagine you search for a popular AI image tool and click a sponsored result. The page looks right, but the address ends in an unusual extension. It offers “lifetime pro access” at a one-off price, with a timer counting down from ten minutes, and the only payment options are a card form and a crypto wallet address.

Running the checklist: the domain does not match the bookmark from the official docs, the domain is a few days old in ICANN Lookup, the offer uses urgency, and crypto is an accepted payment method. That is four independent red flags. The right move is to close the tab and go to the official site directly.

Five-minute pre-payment checklist

• I reached this page from a bookmark or by typing the address, not from an ad or message link.
• The domain matches the one listed in the company’s own documentation.
• The domain is not brand new, or I have another strong reason to trust it.
• The app listing’s developer name matches the company.
• The price, billing period and renewal terms are visible before payment.
• Payment is by card or through the app store, not gift card, wire or crypto.
• Nobody is asking for my password or a verification code.
• I have read the AI companion privacy checklist if the app will see personal conversations.

If you are evaluating a companion app in particular, our framework for evaluating an AI companion app covers the wider questions beyond payment safety.

What to do if you already paid a fake site

Act quickly. The FTC’s advice is to contact the company that handled the payment and ask for a refund or reversal.

Then:

• Change any password you entered on the fake site, and turn on two-step verification on the real account.
• Report it. In the US, the FTC takes reports at ReportFraud.ftc.gov. If you shared personal details, IdentityTheft.gov has recovery steps.
• In the UK, the NCSC lets you report a suspicious website for free, and says it may work with hosting companies to remove malicious sites. If you lost money in England, Wales or Northern Ireland, report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040. In Scotland, the NCSC points to Police Scotland on 101.
• Elsewhere, use your national consumer-protection agency or police fraud line, and always start with your bank.

If the charge was a genuine app-store subscription you simply did not want, the store refund route is different. Our cancellation guide walks through Apple and Google Play refunds.

Bottom line

Most AI clone scams fail a short checklist: the address is wrong, the domain is new, the listing’s developer does not match, the checkout pushes urgency or unusual payment methods, or the page asks for a code it should never need. Bookmark the official site of any AI tool you pay for, check renewal terms before you subscribe, and use our subscription calculator to see what a plan really costs over a year. If something feels off, close the tab. The real product will still be there tomorrow.

For more on what legitimate plans should cost, see AI companion subscription costs, and read how AITried reviews AI products to understand how we source claims like these.