Получить консультацию
Оставьте заявку и наши специалисты
свяжутся с вами в ближайшее время
Защищаем бренды от цифровых угроз — от обнаружения до блокировки
Protection where people are waiting for a gift: how Flowwow and BrandSecurity block scammers
"Hello! We’re writing from Flowwow 💐 Someone has ordered flowers for you. Is it convenient to receive them today?" — an ordinary message in a messaging app that may be hiding scammers. To detect them and block threats at an early stage, Flowwow turned to BrandSecurity. The result of the partnership: 95.9% of violations removed across 535 platforms.
Publication date
09.06.26
Reading time
7 minutes
A bouquet from scammers
Attackers take advantage of the popularity of the flower and gift marketplace and try to mislead users. The desire to receive a bouquet, use a promotion, or redeem bonuses can end in the loss of an account and money if the scammer is not detected early.
A common scam scheme: a fake manager and a delivery bot
A message arrives in a messaging app, supposedly from a Flowwow manager. It looks like someone has ordered a flower delivery as a surprise. To receive it, the user only needs to confirm the order in a Telegram bot.
The possible result of switching to the bot is personal data theft. Sometimes “managers” ask users to follow a link and pay for delivery in order to receive the gift. The entered bank card details are immediately sent to the scammers.
In addition to scam bots, users may encounter:
- fake “Flowwow” apps containing malware;
- phishing websites imitating the official marketplace;
- offers to buy a Flowwow franchise with bonuses, sent on behalf of scammers.
Attackers’ activity is not limited to a set of standard schemes — their methods of deception and disguise are constantly evolving. Today, even inexperienced scammers can create phishing websites and content in just a few clicks using neural networks.
As threats develop rapidly, proactive protection and constant readiness for fast response become essential.
The challenge: strengthen protection against digital threats
About the company
Flowwow is a flower and gift marketplace that brings together thousands of local stores and hundreds of thousands of customers around the world. The platform makes it possible to quickly send gifts to loved ones. The company has a website and mobile apps for customers and sellers, with all orders placed and processed online.
A popular service is an attractive target for attackers. Fraud committed on behalf of Flowwow can lead to serious consequences: from financial losses for customers to undermined trust in the brand and its partners.
Threats the brand needed protection from:
- fraudulent websites, bots, and apps;
- unauthorized use of the trademark;
- sale of promo codes that should remain free for users.
Most threats were detected in messaging apps and social media, which defined the priority areas for protection.
To strengthen protection, the company needed a solution that would make it possible to:
- detect dangerous bots, websites, apps, accounts, and groups at an early stage;
- speed up the threat blocking process;
- reduce the workload on internal teams.
Social Media Monitoring and Analytics Specialist at Flowwow
"Flowwow processes more than 10,000 orders every day, and during holidays this figure increases twentyfold, along with scammer activity. It is important for us that brand protection covers all channels and allows us to respond to threats in real time, without waiting for user complaints. We were looking for a partner that could take on the full cycle: from detecting phishing to blocking it."
Solution: DRP for monitoring and an expert team for analysis and blocking
BrandSecurity’s Digital Risk Protection platform detects and blocks digital threats, including phishing, fraudulent resources, unauthorized brand use, and data leaks.
All about DRP: use cases and technology >
A unified platform is an alternative to fragmented protection tools. The solution combines automated monitoring with mandatory analysis by an expert team. This is a key stage built into the incident handling process. The blocking decision is made by an analyst, which makes it possible to distinguish real threats from false positives.
After analysis, the blocking process begins. The BrandSecurity team submits requests to remove phishing pages, fraudulent accounts, and groups, and involves legal experts when needed. Thanks to procedures refined over 10+ years, threats are removed quickly.
The client receives not just an alert about a violation, but a completed result — the threat removed. The handling process can be tracked in a unified dashboard, where statistics on all incidents are collected.
BrandSecurity Expert
"When a client actively uses the platform, suggests improvements, and shares ideas, we really value that. We always listen to feedback and carefully optimize the interface so that the platform is truly convenient for the client — exactly the way it needs to be for everyday work."
Telegram: the top-priority monitoring channel
The main type of threat in the messaging app is phishing bots disguised as the Flowwow brand. Scammers can message users directly, posing as a manager from an account such as “manager_flowwow_adelina,” and send a link to a malicious bot during the conversation.
Attackers use sophisticated methods to evade standard search:
- they distort the brand name by changing letter case, substituting characters, and adding prefixes or suffixes such as “ru,” “shop,” or “official”;
- they hide bots under neutral or popular channel names.
It was important to detect these bots at an early stage, without waiting for reports from victims.
For automated monitoring, the BrandSecurity team implemented a system that generates all variations of the brand name:
- with character substitution and insertion;
- in different letter cases;
- in combinations with prefixes and suffixes.
This makes it possible to detect bots that cannot be found through traditional search.
Once detected, malicious bots and accounts are immediately submitted for blocking.
Result: threats removed with 95.9% effectiveness
Over two years of cooperation, 5,047 violations were removed across 535 platforms.
What protection delivered:
- reduced reputational risks through early detection of malicious resources;
- reduced workload on the internal team;
- stability during peak seasons — the system withstands growth in scam activity.
Social Media Monitoring and Analytics Specialist at Flowwow
"BrandSecurity is a good fit for us because of its high level of automation, which is especially important when working with a large flow of user feedback. At the same time, the team helps us resolve emerging issues and listens to our feedback, improving the product. For example, they added status tracking for violations that are added to the platform manually. Thanks to this, some requests are not duplicated, and the current status is also clear."
Founder of BrandSecurity
"Flowwow is a marketplace where order peaks and scam activity both fall on holidays. The architecture of our solution was designed from the start to handle these spikes and strengthen monitoring on peak dates. We also track new scam schemes: for proactive protection, it is important to predict scammer behavior and account for the evolution of their methods."
