Is pipitea.co a scam?

Our automated security review marked pipitea.co as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.

Is pipitea.co safe to use?

pipitea.co currently scores 52/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.

Does pipitea.co have a valid SSL certificate?

Yes. pipitea.co presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE1, expiring in 68 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has pipitea.co been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report pipitea.co as clean.

Is pipitea.co on any phishing or malware blacklists?

No. pipitea.co is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is pipitea.co hosted?

pipitea.co resolves to an IP operated by Shopify, Inc. in CA (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the pipitea.co report updated?

This is a permanent record of the scan run on June 30, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around pipitea.co have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is pipitea.co legit or a scam?

Our verdict:Suspicious· 52/100

SafeSuspiciousDangerous

PiPi Tea Co is a tea retailer flagged for aggressive subscription traps, unauthorized credit card charges, and non-responsive customer support.

Top reasons

Multiple reports of unauthorized bank withdrawals and hidden subscription charges.No physical business address or telephone number provided for customer support.Checkout flow is reported to be confusing, leading to accidental high-value orders.

pipitea.coScanned 1h ago

Post Facebook

Trust score

SUSPICIOUS

Heuristics 73·MT 40

Category tags

e-commerce#subscription trap#dropshipping85% MT confidence

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Suspicious

High likelihood · 85% confidence

SUSPICIOUS

Warning signs detected

PiPi Tea Co is a tea retailer flagged for aggressive subscription traps, unauthorized credit card charges, and non-responsive customer support. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

LIVE RENDER

pipitea.co

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust40/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

Our analysis identifies a pattern of predatory billing associated with this brand. Although the parent company is a registered entity in New Zealand, multiple consumer reports on Reddit and independent scam trackers describe a 'subscription trap' where users are charged significantly more than expected. The checkout process appears designed to opt users into recurring deliveries that are notoriously difficult to cancel. Furthermore, the site lacks a physical address or phone number, making dispute resolution nearly impossible for the average consumer. These behaviors are consistent with high-risk dropshipping operations that prioritize recurring revenue over transparent business practices.

Full dossier

Analysis complete

Page Content

The storefront uses a modern Shopify-based layout focusing on USDA Organic Oolong and Hibiscus tea. It employs high-pressure sales tactics such as 'In High Demand' alerts and 'Buy 2 Get 1 Free' bundles to rush the checkout process.

Infrastructure

The site is hosted on Shopify's infrastructure with a valid SSL certificate. It loads several external scripts for tracking and theme functionality, which is standard for e-commerce but also facilitates the aggressive data collection used in their marketing funnels.

Domain History

The .co domain is relatively new and lacks a global traffic index, suggesting it may be a secondary or replacement domain for their more established .com site. This tactic is often used by high-risk merchants to bypass payment processor restrictions or negative search results.

Web Reputation

The brand has a poor reputation across independent review aggregators. While some users receive the product, a significant volume of complaints focus on 'unauthorized withdrawals' and the failure of the support team to honor cancellation requests sent via email.

Risk Factors

Multiple reports of unauthorized bank withdrawals and hidden subscription charges.
No physical business address or telephone number provided for customer support.
Checkout flow is reported to be confusing, leading to accidental high-value orders.
Subscription cancellation process is frequently reported as non-functional or ignored.
Brand uses multiple domain variants (.com and .co) which can be used to hide negative history.

Positive Signals

Parent company PIPITEA CO LIMITED is a registered business in New Zealand since 2019.
The website uses a valid SSL certificate and secure Shopify hosting.
No malware or phishing scripts were detected by our antivirus engines.

AI Recommendation

Avoid purchasing from this site. If you have already shared your card details and are seeing unexpected charges, contact your bank immediately to block future transactions and request a chargeback.

Scam network detected

1 linked domain correlated

This site is the .co variant of the primary pipitea.com domain, which shares the same branding, products, and negative reputation.

pipitea.com

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for pipitea.co, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · New Zealand

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

4 scam reports

Key findings

7 headline facts from open-web research

pipitea.co is the website for PiPi Tea Co selling USDA Organic Oolong and Hibiscus tea bags, claiming high-altitude sourcing from China, non-GMO, with promotions like Buy 2 Get 1 Free and 90-day guarantee.
Closely related domain pipitea.com has a Trustpilot score of 3.5/5 from ~614 reviews, with recurring complaints about difficult subscription cancellation, unexpected recurring charges, and confusing checkout.
Multiple BBB Scam Tracker reports and Reddit threads describe unauthorized charges (e.g. $134.93), hard-to-cancel subscriptions, non-functional contact numbers, and calls it a "scam".
Company policy states subscriptions can be cancelled by emailing support@pipitea.co before next billing, but processed orders are non-refundable; many customers report this process fails or leads to repeated charges.
PIPITEA CO LIMITED is a legitimately registered New Zealand company since 2019; the .co site uses PT business hours and the same support email as .com.
Products also sold on Amazon; site includes standard disclaimers that testimonials are unverified and products not intended to diagnose/treat diseases.
No specific complaints found exclusively for pipitea.co, but it mirrors the branding, products, and contact details of the heavily complained-about pipitea.com operation.

Scam reports (4)

Direct quotes from public scam databases, forums, and news.

Redditopen
"This is a terrible company to deal with. Canceling subscriptions is a night mare. They have no legit phone number and I have emailed them ..."
BBB Scam Trackeropen
"Their website is VERY confusing. they had charged me for $134.93!! https://pipitea.com"
Gridinsoftopen
"Definitely a SCAM. Unauthorized withdrawals from my bank account, multiple promises to cancel "subscription" they signed me up for, and lie after lie."
Redditopen
"I too was caught up in the Pipi Tea scam. I ordered ONE set of 3 tea packages... for $69."

Business registration

Status: active · New Zealand

PIPITEA CO LIMITED (NZBN: 9429046355867), incorporated Feb 07, 2019; registered office care of Milnes Beatson Ltd, Motueka. Site uses support@pipitea.co and claims PT timezone.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research into this operator revealed a significant number of consumer complaints. On Reddit and independent scam-tracking databases, customers have documented unauthorized charges and deceptive subscription enrollments. While the business is officially registered in New Zealand, the discrepancy between their '90-day guarantee' and the actual customer experience—where emails are reportedly ignored—suggests a high-risk operation.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious56Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

Has a contact email on its own domain

Emails on site's domainsupport@pipitea.co

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No phone number listed on the page.
No postal address visible on the page.

Contact email on the site's own domain (support@pipitea.co).

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · YE1

ExpiresSep 7, 2026 (68d)

Self-signedNo

Hosting & Technology

HostingShopify, Inc.

Server locationCA

Web servercloudflare

Platform / CMSShopify

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://pipitea.co/
2200https://pipitea.co/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file117

ISPShopify, Inc.

Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

Treat pipitea.co as unverified
Do not enter credentials or send money until you have independently verified the business.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

cdn.shopify.com js.shrinetheme.com gstatic.com fonts.gstatic.com fonts.googleapis.com shopify.jsdeliver.cloud fonts.shopifycdn.com api.config-security.com conf.config-security.com monorail-edge.shopifysvc.com release.insurance-widget-prod.pages.dev

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review marked pipitea.co as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
pipitea.co currently scores 52/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
Yes. pipitea.co presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE1, expiring in 68 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
No. All 92 antivirus engines in our malware network report pipitea.co as clean.
No. pipitea.co is not currently listed on the major browser blocklist feeds that modern browsers use.
pipitea.co resolves to an IP operated by Shopify, Inc. in CA (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 30, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around pipitea.co have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·pipitea.co

SUSPICIOUS

This site operates as a tea storefront but is linked to numerous reports of deceptive subscription practices and unauthorized bank charges. While the business is officially registered, customers frequently report being unable to cancel recurring payments. Exercise extreme caution before providing payment details.

Avoid purchasing from this site. If you have already shared your card details and are seeing unexpected charges, contact your bank immediately to block future transactions and request a chargeback.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Suspicious reports

Browse all reports

Suspicioustrust29

link.message-sender.com

derah.bottierrangleneavil.cfd

5h ago

Read the review

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.