Amazon and Shein fans warned of ‘unsafe’ cheap Apple knock-offs – do YOU own one?

COPYCAT Apple, Fitbit and Samsung smartwatches are snooping on users, according to a Which? investigation shared exclusively with The Sun.

As the saying goes, for every masterpiece there is a cheap copy. But these rip-offs can actually put its users data at risk.

Getty

The data is not stored securely[/caption]

Consumer champion Which? tested cheap smartwatches and fitness trackers sold online by the likes of AliExpress, Shein, Wish, Ebay and Amazon late last year.

The investigation found a number of security flaws, such as excessive data collection, no opt-out option and a lack of security lock to stop thieves from accessing the device.

The data is not stored securely either.

Big brands almost always encrypt their data, so your personal information is kept completely private – not even the companies themselves can see it.

“We’ve uncovered a range of knock-off smartwatches and fitness trackers sold on online marketplaces that are reckless with people’s data and have concerning security flaws that could leave consumers exposed to hacking attacks,” Lisa Barber, computing editor at Which?, explained.

“Cheap connected tech products will be a tempting offer for many, particularly amid the cost of living crisis, but with these low-quality lookalikes you could end up ultimately paying with your data and privacy.” 

Which ‘worrying’ smartwatches should I look out for?

• Briame D20 Pro Smartwatch Y68 (£2.07, AliExpress)
• Briame M6 (£2.20, AliExpress)
• ID115 Plus Sports Fitness Tracker Watch Heart Rate Blood “Pleasure” Activity Monitor Fit-Bit (£2.89, Ebay) 
• IWO 14 Pro Series 7 (£12.79, AliExpress)
• For Fit-Bit Fitness Smart Watch Band Sport Activity Tracker Adult Kid Fitbit Step Counter (£12.98 Ebay)
• Cobrafly P8 (£15.31, AliExpress)
• Chuyong 2022 New Women Bluetooth Call Smart Watch Heart Rate Blood Pressure Monitoring Smartwatches IP67 Waterproof Men Smartwatch + Box (available at time of purchase from AliExpress, £20.44)
• Aswee PUO1 (£29.99, Amazon)

The Szos app used by the IWO 14 stores all data on infrastructure controlled by the seller, instead of on the watch itself.

So users must request their data back from the seller every time they wish to view it.

Neither the IWO nor the Aswee encrypt your data when sending it to and from their servers.

So, if a hacker intercepted the data, they would be able to read it. 

A spokesperson for Alibaba told The Sun: “Although AliExpress does not take custody of the goods being sold, we have in place policies that all our third-party sellers must comply with to create a safe shopping environment.

“Following an internal review – these items have now been removed.”

An Ebay spokesperson told The Sun: “When Which? contacted us about this report in December 2022, we reviewed the products and found that the majority did not violate our policies.

“However, we removed the product that did not have sufficient documentation.”

An Amazon spokesperson told The Sun: “If customers have concerns about an item they’ve purchased, we encourage them to contact our Customer Service directly.

“We have removed these two products while we investigate.”

A Shein spokesperson added: “We have removed the product as a matter of caution whilst we conduct an investigation.

“Product safety and security are priorities for Shein, and we strive to comply with all applicable laws and regulations”

A spokesperson for Wish said: “We thank Which? for bringing this to our attention.

“The item flagged was removed some time ago, but we have since removed certain identical items.”

---

We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at tech@the-sun.co.uk

---