TikTok GEET Extension Scam Promises Free $1,000 Amazon Gift Cards
A dangerous new TikTok scam is tricking users into installing a malicious Chrome extension called 'GEET' with promises of fake $1,000 Amazon gift cards.
A massive viral scam is sweeping across TikTok, tempting millions of users with the promise of a free $1,000 Amazon gift card. But behind the flashy videos and glowing reviews lies a trap. Security researchers have flagged a malicious browser extension called “GEET” that is infecting computers, hijacking web browsers, and stealing sensitive user data.
How the Trap Snaps Shut on TikTok
The scam spreads through short, high-energy videos on TikTok. Many of these clips feature AI-generated voices or stolen footage of young people celebrating their supposed windfall. The formula is simple. The video shows an apparently real Amazon account with a massive, ready-to-spend balance. The narrator claims anyone can get the same result by downloading a free tool called “GEET” from the official Chrome Web Store.
To make the scheme look legitimate, the scammers use several tricks to manipulate the TikTok algorithm. They fill the comment sections with bot accounts posting fake testimonials. “I actually got the $1,000!” one bot claims. “It took less than five minutes,” says another. These fake interactions push the videos onto the “For You” feeds of millions of unsuspecting users, particularly teenagers and young adults who are easily lured by the promise of quick cash.
The Illusion of Safety on the Chrome Web Store
When curious users follow the video’s instructions, they are redirected to the official Google Chrome Web Store. Having the malicious software hosted on Google’s own platform gives the scam an unearned air of authority. Many users assume that if an extension is on the official store, it must be safe. Unfortunately, bad actors have learned how to bypass Google’s security checks.
Often, developers will upload a perfectly clean, harmless version of an extension to pass Google’s initial review process. Once approved and listed, they push a silent update containing the malicious code. In the case of GEET, the extension demands highly invasive permissions immediately upon installation. It asks for the ability to “read and change all your data on the websites you visit.” Once a user clicks “Add to Chrome,” the damage is done.
What the GEET Malware Really Does
Unsurprisingly, there is no $1,000 Amazon gift card. Instead of a shopping spree, victims are left with a compromised computer. Once active, the GEET extension quietly establishes a connection with a remote server controlled by the hackers.
From there, the malware begins its real work. It hijacks the user’s browser, redirecting normal search queries to sketchy, ad-laden search engines. It injects pop-up advertisements onto legitimate websites, generating revenue for the scammers. More alarmingly, the extension is capable of harvesting session cookies and saved passwords. By stealing these cookies, attackers can bypass multi-factor authentication and gain direct access to the victim’s social media, email, and online banking accounts.
Because many TikTok users access the app on shared family computers or school Chromebooks, a single infection can compromise an entire household’s digital security. Parents may find their own accounts accessed or their personal data leaked because a child tried to claim a fake gift card.
How to Clean Your Device and Stay Safe
Google has since moved to ban the GEET extension from the Chrome Web Store, but that does not automatically delete it from devices where it was already installed. If you or someone in your household fell for this offer, immediate action is required.
First, open your Chrome browser, click the puzzle piece icon in the top-right corner, and select “Manage Extensions.” Look for GEET or any other extension you do not recognize and click “Remove.” After deleting the software, it is vital to clear your browser cache and cookies, run a full system scan with reputable antivirus software, and change the passwords for your most important accounts.
As online threats grow more sophisticated, cybersecurity experts urge users to remain skeptical. If an offer online sounds too good to be true, it almost certainly is. No legitimate company is giving away thousand-dollar gift cards in exchange for installing a browser extension.
