The “Shipping Rebate” That Quietly Bills Your Card $25 a Month (2026)

Red flag — a “shipping rebate” that needs your card details before it can pay you is a subscription trap. Malwarebytes mapped the cluster on September 25, 2026: a family of near-identical sites — ShipmentsFree, ShipmentFree, FreeShipments, and lookalikes like freeshpmts.com, shipmentsfreezone.com, and shipmentsfreeclub.com — sharing account pages, policy language, and support details. The pitch is up to $100 a month back in shipping and return rebates; the terms hide a paid, auto-renewing subscription. People enroll inside a checkout, promotion, or pop-up while buying something else, then find a recurring $25 charge under a statement name they don't recognize. Cancel through the official account channel — and demand the enrollment records.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

Check a URL free Read the full guide

From the research desk — this pattern is one of those documented in This Week's Scam Wave, in Numbers — September 29, 2026 →

Why you’re seeing this now

Malwarebytes mapped this cluster on September 25, 2026: a family of near-identical sites — ShipmentsFree, ShipmentFree, FreeShipments, and lookalike domains like freeshpmts.com, shipmentsfreezone.com, and shipmentsfreeclub.com — sharing account pages, overlapping policy language, and the same support details. The pitch sounds like savings: up to $100 a month back in shipping and return rebates. The catch sits in the terms: it's a paid, auto-renewing subscription. People enroll through a retailer promotion, a checkout offer, an app, or a browser pop-up — often while buying something else entirely — and weeks later a recurring $25 charge surfaces under a statement name they don't recognize. The brand they remember isn't the name on the bill, which is exactly what makes these traps profitable: the exit is quiet and monthly, not one dramatic charge. If you find one, cancel through the provider's official account channel, demand the enrollment date and consent records, and call your card issuer if you never knowingly authorized it.

The exact words they use

Quoted from documented versions of this script so you can recognize it on sight. The words are the scammer’s — the patterns inside them are what give the con away.

One complainant said they “did not understand” they were enrolling in a paid membership or authorizing the monthly charge — the recurring theme across 529 Better Business Bureau complaints in three years, 179 of them classified as billing issues, against a single shipping-rebate operation.

Script language quoted for recognition — if the message in your hand reads like this, you already have your verdict.

Five red flags — any one is enough

A “rebate” or “cash back” offer that needs your card details before it can pay you.

Enrollment happens inside a checkout, pop-up, or promotion for something else you were buying.

The charge on your statement carries a name you don't recognize — different from the brand you remember.

A family of near-identical domains with overlapping policies and shared support contacts.

A complaint file full of “I didn't understand I was enrolling” — and cancellation terms you have to hunt for.

Your next three moves

Verify through a channel you open yourself: pull up your card statement, find the exact charge name, and go to that provider's official site yourself — never through the pop-up or promo that enrolled you. Real rebates don't need your card before they can pay you.

Refuse the enrollment, or unwind it: cancel through the provider's official account channel, demand the enrollment date and consent records in writing, and call your card issuer if you never knowingly authorized the charge — a recurring $25 you never agreed to is a dispute, not a bill.

Report it at reportfraud.ftc.gov and file with the Better Business Bureau — 529 complaints in three years, 179 of them billing issues, are already on one such operation — and check the enrollment page's link via the $2 instant check.

I never signed up for anything — where did this $25 charge come from?

Enrollment happens inside a retailer promotion, a checkout offer, an app, or a browser pop-up — often while you're buying something else entirely. Weeks later a recurring $25 charge surfaces under a statement name you don't recognize; the brand you remember isn't the name on the bill.

Are ShipmentsFree, ShipmentFree, and FreeShipments the same company?

They behave like one: Malwarebytes found a family of near-identical sites — including freeshpmts.com, shipmentsfreezone.com, and shipmentsfreeclub.com — sharing account pages, overlapping policy language, and the same support details.

How do I get my money back?

Cancel through the provider's official account channel, demand the enrollment date and consent records, and call your card issuer if you never knowingly authorized the charge. The exit is designed to be quiet and monthly — catching it on one statement is what stops the rest.

Sixty seconds of checking beats a four-figure mistake.

Paste any URL for a free instant preview — the full 0–100 report is $2, one-time. No subscription.

Spot the scam before it spots you.

For businesses · $19, one-time

Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $19

Free brand scan first — you only pay for the full audit.