I got done yesterday.
There was an ad on Facebook (warning no1) for a Loakes Shoes sale.
I clicked it and was taken to a perfect copy of the Loakes site (With valid cert) which offered a sale with 80% off their range (warning no2).
I bought 63 quids worth of shoes using their legit Stripe checkout and didn't get a confirmation email.
So I logged into the site again to see what's up, order still there "payment pending". OK fair enough, thinks I, the site is probably busy due to the sale.
having closed my browser during the day, I tried to log in again to check on the order and lo and behold, there was no record of the order at all. Also, I had to change my password to log in. Uh Oh.
The site I had ordered from was loakeuk.shop (now taken down) and the real site is loake.com
So, I'm out £63 pending a claim process which may or may not return my money from Mastercard after 30 days. I called my bank before the payment went through but they were unable to cancel it because "it wasn't fraud, you entered your details". It's possible I'll get the money back 30 days after non receipt of goods. I'm not holding my breath.
So..the moral of the story is - don't trust anything on Facebook because they CBA to vet advertisers. Don't order through Stripe because they cba to vet their customers.
I asked the bank and they said it would have been the same situation had I used a credit card. I guess I'll stick to Paypal.
The worst part is two of my mates gone done after I passed them the link, and 5 of _their_ mates got done similarly. Agh.