The ItonSearch Scam: Protecting Yourself from Online Threats
Itonsearch is a fake online shop. The pattern is the one every scam storefront follows: implausible discounts on brand-name goods, no verifiable company details, a very recent domain registration, and either nothing arrives or a counterfeit does.
If you have already paid, the route back depends on how. Card payments can be reversed through chargeback or, over £100, a Section 75 claim against your card provider. Bank transfers are far harder, but report it to your bank immediately anyway.
The general test for any unfamiliar shop: check how long the domain has existed, look for a registered company number and address, and treat reviews hosted on the site itself as worthless.
At a glance
- Type
- Browser hijacker
- How it spreads
- Bundled free software & pop-up ads
- Main risk
- Data collection & malicious redirects
- Fix
- Remove extension, reset browser, scan
If you handed over card or bank details, treat it as live and act now rather than waiting for a charge to appear.
🛡️ Build your recovery plan
Tick what applies to you. The order below is deliberate — most of these organisations will ask for your Action Fraud reference number, so doing it in this sequence saves you making the same call twice.
Nothing ticked yet — the steps below are the ones that apply to everyone. Tick a box above to add the rest.
- 1
Report it to Action Fraud and get your crime reference number
Action Fraud — the national reporting centre for fraud
- Onlinereportfraud.police.uk
- Phone0300 123 2040
Do this second, and do it before you contact anyone else. Almost every organisation in this list — lenders, credit reference agencies, debt collectors — will ask for the crime reference number Action Fraud gives you, and without it you end up making the same call twice. It also creates the official record you'll rely on if you have to dispute anything later. Expect an update within 28 working days, though that's about the investigation, not about clearing your name; that part is on you and starts now.
Have ready: What happened and roughly when · Any account or reference numbers involved
- 2
Get all three credit reports and read every line
Experian, Equifax and TransUnion
- Experian0800 013 8888
- Equifax0800 014 2955
- TransUnion0330 024 7574
All three, not one. Lenders report to different agencies, so a fraudulent account can sit on one file and be invisible on the others — checking a single report is the most common way people miss the second and third account. You're looking for accounts you didn't open, searches you didn't authorise, and addresses linked to your name that you've never lived at. That last one matters more than it sounds: a linked address you don't recognise is often how the fraud was set up in the first place.
Have ready: Your addresses for the last six years
- 3
Add a CIFAS protective registration
CIFAS — the UK fraud prevention service
- Onlinecifas.org.uk
- Phone0330 460 9601
This puts a warning flag against your name in the National Fraud Database, so member organisations run extra identity checks before granting credit in your name. It costs £30 and lasts two years. It does not affect your credit score, and it doesn't touch accounts you already hold — but it will make your own applications slower, which is the trade-off. If someone has your details, that's usually a trade worth making. Note that not every application is checked against the database, so treat it as a strong deterrent rather than a lock.
- 4
Check you're on the electoral register at the right address
Your local council
A quick one that's worth doing while you're here. The electoral roll is one of the main ways lenders confirm you live where you say you do, and being missing from it both weakens your own applications and makes it easier for someone to claim your identity elsewhere.
- 5
Escalate if you get nowhere
Financial Ombudsman Service, or the ICO
- Financial Ombudsman0800 023 4567
- ICOico.org.uk
If a bank refuses to refund you, or a lender won't remove an entry it has accepted is fraudulent, complain to the firm first and give it eight weeks. After that — or as soon as you get a final response — take it to the Financial Ombudsman. It's free and its decisions bind the firm. Where the argument is specifically about inaccurate data staying on your credit file, the Information Commissioner's Office can also look at it. Both routes cost you nothing.
- 6
Close the door behind you
You
Change passwords on your email account first, not your banking — email is the master key, because it's where password resets land. Turn on two-factor authentication wherever it's offered. If documents were lost or stolen, report the passport or driving licence to the issuing body so it can be flagged. And set a reminder to re-check your credit reports in three months: fraudulent applications sometimes surface long after the original breach.
Contact details and process reflect Action Fraud, CIFAS, the credit reference agencies and National Debtline guidance for England and Wales. Scotland reports fraud through Police Scotland on 101 rather than Action Fraud; the rest of the process is the same. General information, not legal advice — free, independent help is available from National Debtline, Citizens Advice and StepChange.
Key Takeaways
- The ItonSearch scam is a browser hijacking scheme targeting popular browsers, entering systems through free software downloads or malicious ads. It aims to redirect searches to ItonSearch.com, which can display harmful content.
- Watch for homepage and search engine changes, unfamiliar browser extensions, intrusive ads, and unexpected browser behaviour as signs of infection.
- The scam can lead to data collection, exposure to malicious content, system slowdowns, and loss of control over browser settings.
- To stay safe, exercise caution when installing software, keep software up to date, be wary of suspicious websites and ads, use reliable security software, remove suspicious browser extensions, reset browser settings if needed, stay informed about scams, enable two-factor authentication, back up data, and report suspicious activity.
What Is The ItonSearch Scam?
The ItonSearch scam is a form of browser hijacking that targets popular web browsers such as Chrome, Firefox, Edge and Safari. It typically enters users' systems through bundled download packages of free software or malicious popup ads.
Once installed, it modifies browser settings without the user's consent, changing the homepage, search provider, and new tab URL to ItonSearch.com.
The objective of this scam is to redirect users' search queries to ItonSearch.com, a search engine promoted by the browser hijacker. While seemingly harmless, ItonSearch.com can display intrusive and harmful ads, leading users to deceptive, misleading, or malicious websites.
The search results may be tailored to promote questionable programs or products, putting users' privacy and security at risk.
Signs and Symptoms of the ItonSearch Scam
Identifying the signs and symptoms of the ItonSearch scam is crucial in preventing further damage. Here are some common indicators that your browser may be affected:
Unwanted Homepage and Search Engine
If your browser's homepage and default search engine have been unexpectedly changed to ItonSearch.com, it is likely that your system has been compromised.
Unauthorised Browser Extensions
The presence of unfamiliar or suspicious browser extensions that you did not install is a red flag. These extensions may be associated with the ItonSearch scam and should be removed immediately.
Intrusive Ads and Redirects
If you notice an increase in intrusive ads or frequent redirects to unfamiliar websites, it is a clear sign that your browser has been hijacked.
Changes in Browser Behaviour
Any modifications to your browser's behaviour, settings, or appearance without your consent should be treated as a potential indication of a browser hijacking.
Potential Risks and Impact of the ItonSearch Scam
The ItonSearch scam poses several risks and can have a significant impact on users' privacy, computer performance, and overall security. Let's explore some of the potential consequences of falling victim to this scam:
Data Collection
ItonSearch.com has the ability to collect various types of user information, including IP addresses, web browser details, usernames, passwords, internet cookies, and browsing history. This sensitive data can be exploited by cybercriminals for malicious purposes, leading to identity theft or financial fraud.
Exposure to Malicious Content
By redirecting users' search queries to deceptive or malicious websites, the ItonSearch scam exposes users to a wide range of threats, including malware infections, phishing attempts, and scams. Clicking on these malicious links or downloading files from these websites can result in system compromise and data loss.
Compromised System Performance
Browser hijackers like ItonSearch.com often consume system resources, leading to slower performance, increased browser crashes, and reduced overall productivity. Users may experience frequent freezes or delays while browsing, hindering their online experience.
Loss of Control and Privacy
The ItonSearch scam takes control of users' browsers, preventing them from reverting to their preferred homepage, search engine, or new tab page. This loss of control can be frustrating and infringe upon users' privacy rights.
How To Remove The ItonSearch Scam
To remove ItonSearch from your browser, follow these steps:
- Access Browser Settings: Open your web browser and go to its settings menu.
- Manage Extensions: Look for the "Extensions" or "Add-ons" section in the settings.
- Locate ItonSearch: Find the ItonSearch-related extensions or add-ons and click on "Remove" or "Disable" next to them.
- Reset Browser Settings: Consider resetting your browser to default settings if the problem persists. This will remove any unwanted extensions and reset your homepage and search engine.
- Run Antivirus Scan: Perform a full system scan using reputable antivirus or anti-malware software to ensure no traces of ItonSearch remain.
- Check for Unwanted Programs: Review your installed programs and uninstall any suspicious or unwanted software that may have brought ItonSearch.
- Change Passwords: Change your browser and online account passwords, as ItonSearch may have compromised your data.
By following these steps, you can effectively remove ItonSearch and restore your browser's normal functionality.
Protecting Yourself from the ItonSearch Scam
Prevention is key when it comes to safeguarding yourself against the ItonSearch scam. Here are some practical steps you can take to protect yourself from falling victim to this fraudulent scheme:
1. Exercise Caution When Installing Software
Be cautious when installing new software, especially from untrusted sources. Always opt for the custom installation option and carefully review each step of the installation process.
Pay close attention to any pre-selected checkboxes that may indicate the inclusion of additional software or browser extensions.
2. Keep Your Software Up to Date
Regularly update your operating system, web browsers, and security software to ensure you have the latest security patches and protection against known vulnerabilities. Outdated software can expose you to various risks, making it easier for browser hijackers and other malware to infiltrate your system.
3. Be Wary of Suspicious Websites and Ads
Exercise caution when visiting unfamiliar websites or clicking on suspicious ads. Avoid downloading files or clicking on links from untrustworthy sources. Cybercriminals often use deceptive ads and fake software updaters to distribute malware or initiate browser hijackings.
4. Install a Reliable Antivirus and Anti-Malware Program
Invest in a reputable antivirus and anti-malware program that offers real-time protection against browser hijackers and other online threats. Regularly scan your system for malware and follow the recommended actions to remove any detected threats.
5. Remove Suspicious Browser Extensions
Regularly review your browser's list of installed extensions and remove any that you do not recognise or trust. Avoid installing extensions from unverified sources, as they may contain malicious code that can compromise your browser's security.
6. Reset Your Browser Settings
If your browser has been hijacked by ItonSearch.com, consider resetting your browser settings to their default values. This will remove any unwanted extensions, reset the homepage and search engine, and eliminate any customisations made by the browser hijacker.
7. Educate Yourself About Online Scams
Stay informed about the latest online scams and phishing techniques. Educate yourself on the warning signs and best practices for staying safe online.
Be cautious when sharing personal information online and avoid clicking on suspicious links or downloading files from unknown sources.
8. Enable Two-Factor Authentication
Enable two-factor authentication (2FA) whenever possible, especially for important accounts such as email, banking, or social media. This adds an extra layer of security by requiring a second form of verification, such as a unique code sent to your mobile device, in addition to your password.
9. Backup Your Data Regularly
Regularly back up your important files and data to an external hard drive, cloud storage, or another secure location. In the event of a malware infection or system compromise, having a recent backup can help you restore your files and minimise data loss.
10. Stay Vigilant and Report Suspicious Activity
Remain vigilant while browsing the internet and report any suspicious activity or websites to the appropriate authorities. If you believe your system has been compromised by the ItonSearch scam or any other form of malware, seek professional assistance from a reputable IT security provider or follow the recommended removal steps provided by trusted sources.
Protecting yourself from online scams like the ItonSearch scam requires a combination of vigilance, knowledge, and proactive measures. By staying informed, practising safe browsing habits, and implementing robust security measures, you can minimise the risk of falling victim to fraudulent schemes.
Remember to keep your software up to date, exercise caution when downloading or installing new software, and regularly scan your system for malware. By taking these precautions, you can enjoy a safer and more secure online experience.
Other Scams to be aware of:
- What to do when someone is using your name and address fraudulently
