Cyber security experts have issued a warning against Chinese online marketplace megalith Temu's 'very dangerous' cash giveaway, claiming that it could lead to serious fraud.
The retailer is offering users 'free' cash in exchange for new sign-ups - and hundreds of people are jumping on the bandwagon.
Screenshots of multiple £50 payments going into social media users PayPal accounts have been plastered across the internet, as they prompt others to make the most of the unusual deal.
The shopping website, which sells extremely cheap goods sent directly to users from China from wholesalers, is running a promotion offering a combination of cash and store credit in exchange for new members joining up - allegedly all people need to do to start getting rewards is to get new users to click on their sign up link.
However, there are concerns that people entering the promotion could have their information 'sold' to advertisers with the giveaway being dubbed 'too good to be true'.
Chinese online marketplace megalith Temu is running a giveaway offering users 'free' cash in exchange for new sign-ups - and hundreds of people are jumping on the bandwagon
MailOnline spoke to cyber security experts to find out if there are any risks associated with the controversial promotion and whether it's safe to sign up.
Jake Moore, Global Cyber Security Advisor at ESET, warns that the cash is 'not free' and giving away your data for money can be 'very dangerous down the line'.
He explained: 'This app is effectively offering money, not for free, but it's offering money in exchange for personal data and device data.
'Most apps require some sort of data to function. It's really important to pay attention to all submissions requested by these apps.
'Some apps can be sneakier than others and some request more than others. Data is the new currency and it has been for a little while now.
'When companies trade in data, that personal data can be analysed, which might not sound too bad. But when it gets shared, it can be damaging further down the line.'
The expert added: 'In extreme cases, it can even be used for identity fraud because if that data is compromised,it can be very dangerous for those people that have given their data away.
'They have given their data away freely, so they're not being conned out of it. It will all be written down in the terms and conditions but of course, people aren't reading those.
Jake Moore, Global Cyber Security Advisor at ESET, warns that the cash is 'not free' and giving away your data for money can be 'very dangerous down the line'
'They're just seeing the end goal of of being offered £50 to access that data. So I think rightly so people are beginning to question if they should have given their data away for payments.'
He explained that cybercriminals are 'very good at pretending to be whoever they want to be' and the data could allow them to know things about you they wouldn't otherwise, causing you to think they are genuine.
Jake told MailOnline: 'In theory, Temu is a Chinese app and it may be allowed to share its company data with the Chinese government. That can be a worry, because with most companies, when they say that the data won't be seen anywhere else, you can rest assured that it shouldn't be.
'But when they have different laws in different countries that may in their country legally allow access if required, then it can be a worry.
'So, for example, criminals could get hold of that data potentially and use it to phish people. So this could be phishing emails or texts, or even voice calls where they purport to be from your bank.
'Once you let your guard down, this is where they may be able to force you into moving your money, or they might force you into handing over a password or a two-factor authentication code to them, purely because they knew some personal details about you.'
The warning comes just asthe UK and US identified China as the source of a wave of cyberattacks on public figures and institutions.
The rules in the 'Cash Reward' promotion state users agree to give Temu permission to use their 'photo, name likeness, voice, opinions, statements, biographical information, and/or hometown and state' worldwide.
Mark Wilshaw, Cyber Security Services Manager at SYTECH, also chimed into the debate.
The terms for the contest warn that personal information is surrendered by entering the competition (left). Data is processed in accordance with Temu's privacy policy (right), which says information can shared or 'sold' but does say users can opt out
Flashy graphics tell users that the free money is within their grasp - as long as they get some friends to join Temu as well
Screenshots of multiple £50 payments going into social medias users PayPal accounts have been plastered across the internet, as they prompt others to make the most of the unusual deal
He said: 'The level of personal information that is required to enter the giveaway, coupled with their rules leads to a risk to both privacy and security.
'The recorded personal information can be sold to marketing companies who will then bombard you with spam contact.
'It is usual for businesses to sell some information - however, it is not normal practice for personal information such as a photograph and or a voice to be sold too.
'With a photograph and voice, potential unscrupulous businesses or individuals can be even more convincing with attempts to steal identities.
'Also, depending upon the types of photographs and voice samples in question, it may be possible to further exploit individuals through deepfaking and similar technologies.'
The expert insists that he 'would recommend not participating in these kinds of promotions'.
He advised: 'You have to ask yourself, is the deal too good to be true? How much value do you put on your personal information? How much will becoming a victim of fraud cost you?
'It is easy to focus on a free cash offer but the value is never high enough to compensate for the potential damage.'
However, the terms and conditions that are concerning people are not exclusive to Temu.
People have taken to X (formerly Twitter) to discuss the controversial giveaway
The app features what it says are reviews from competition winners who have managed to claim the free money
Temu's distinctive packaging often appears on social media - including TikTok, where users show off their budget 'hauls' of cut-price goods
READ MORE:Independent dressmaker forces Chinese marketplace Temu to remove tawdry knock-off of her design from its site after spotting it for sale at a fifth of the price
<!- - ad: https://mads.dailymail.co.uk/v8/gb/news/none/article/other/mpu_factbox.html?id=mpu_factbox_1 - ->
Advertisem*nt
Other retailers such as Shein, McDonald's and Subway have similar small print for their competitions.
McDonald’s FANnual Report Sweepstakes competition terms and conditions say: 'By participating in the Sweepstakes, each verified winner hereby agrees and grants Sponsor the right, but not the obligation, to the use of their name, voice and likeness, along with their address (city and state)'.
Additionally, Temu's competitor Shein also have giveaways with these kinds of conditions, including: 'the winners’ consent for use of his/her Photo, name, likeness, voice, opinions, statements, biographical information'.
Temu's privacy policy states that it can share personal information with third parties such as advertisers.
The site insists that it does not 'sell' user data - but admits that in some countries, the sharing of data is considered 'selling'.
The policy reads: 'At Temu, we care deeply about privacy. While Temu shares your personal information for the purposes of targeted advertising, which may be considered a "sale" under applicable privacy laws, Temu does not "sell" personal information in the traditional sense.'
But, cyber security expert Tom insists that this is a 'really good opportunity for people to think about what data they're giving away'.
Adrianus Warmenhoven, a cyber security expert atNordVPN, comments: 'The scheme bears all the red flags of a phishing scam, luring consumers with a dubious link promising a £50 PayPal credit.
'But while such offers typically ring alarm bells, reports indicate some individuals have reaped substantial sums.
'Though the offer may be genuine, consumers need to understand what they are gambling with. Surrendering personal data without understanding its purpose or potential repercussions exposes them to grave risks - be it falling victim to cybercrime or identity theft.
'This costly marketing tactic employed by the Chinese online marketplace has undeniably attracted a surge of new users. However, concerns linger over Temu's past allegations of data harvesting through app malware, raising fears of data monetisation.'
Temu's privacy policy states that it can share personal information with third parties such as advertisers
READ MORE:Amazon officials rush to improve delivery speed as company loses two million customers while Chinese competitors, Temu and Shein, have seen nearly 57million new users
<!- - ad: https://mads.dailymail.co.uk/v8/gb/news/none/article/other/mpu_factbox.html?id=mpu_factbox_2 - ->
Advertisem*nt
She adds: 'You have to stop and ask yourself ‘Why is my data so valuable to them?’ and really consider if the deal is worth it in the long run.
'Temu is well-known for its ‘spin the wheel’ style offers when you first open the app, but remember that the company isn’t a charity. It is hell-bent on making profits and will use your data to its full advantage.
'While the promise of a swift £50 may be tempting, the stakes of compromising sensitive information far outweigh the reward.'
After being approached by MailOnline,Temu has updated its Cash Reward campaign Terms & Conditions to clarify the limited ways Temu uses customer data - 'to publish just the name and profile picture of the consumer’s name participating in the campaign in promotional content'.
A Temu spokesperson told MailOnline: 'Like many other companies, Temu employs a variety of marketing strategies to attract new customers.
'Our Cash Reward program offers a referral incentive – a common customer acquisition method used across industries.
'Some participants have expressed concern about the promotion's Terms & Conditions (T&Cs).
'To reassure our customers, we've revised the T&Cs to clearly specify the minimal information used: usernames and profile pictures for referral notifications and winner announcements.
'The previous terms and conditions had inadvertently included promotional uses that Temu does not engage in.
'At Temu, safeguarding privacy and maintaining transparency in our data practices are core values.
'We collect minimal information solely to provide and continually enhance our services for our users. We value customers' trust and feedback. We do not and will not sell customer data.
'Temu operates under strict data privacy and security standards. Our app is independently certified by Germany's Dekra to meet the OWASP MASVS (Mobile Application Security Verification Standard), the industry standard for mobile app security.
'In addition, Temu runs a bug bounty program with the leading cybersecurity firm Hacker. One and has implemented multi-factor authentication to safeguard user access. All transactions are encrypted according to Payment Card Industry (Data Security Standard) protocols.
'Temu stands firmly against phishing and identity theft. We have taken legal action against websites and apps that impersonated our brand in order to protect our customers and ensure a secure shopping environment.
'We are a member of the Anti-Phishing Working Group (APWG), a global coalition dedicated to fighting phishing and cybercrime, whose members include companies like Microsoft, PayPal, top cybersecurity firms Symantec and McAfee, and governmental agencies.
'Temu has never provided user data to the Chinese government, nor would it do so if asked.'