If you shop online often, you’ve probably heard of Honey — the app and browser extension that promises to save you money by automatically applying coupon codes at checkout. Owned by PayPal, Honey is installed on millions of browsers and supports over 30,000 retailers. But while Honey is legit, a growing number of users and experts have been raising concerns about its business operations, revenue sources, data privacy protections, and scam imitators.

How Honey Works

The official PayPal Honey extension works by scanning the web for valid promo codes and automatically testing them when you check out. Honey is free, but it’s supported by commissions it earns from partner retailers when purchases are made through its links.

It also offers features such as:

• Honey Gold: A rewards program that gives you points (redeemable for gift cards) when you shop at partner stores.
• Droplist: A feature that notifies you when items you’re watching drop in price.
• Amazon Badge: A tool that compares prices from different sellers on Amazon, helping you find the best deal.

Honey-Related Scams

As the extension’s popularity has grown, scammers have tried to exploit the Honey name in various ways:

• Fake Honey extensions: fraudulent extensions designed to mimic the real one can steal your data or inject ads.
• Phishing emails and messages: scams pretending to be from Honey or PayPal may ask you to click malicious links or provide personal information.
• Fake reward giveaways: posts on social media promising “free Honey Gold” are often just bait to trick users into revealing sensitive data.

To stay safe, always download Honey from the official joinhoney.com website or your browser’s verified extension store.

Honey’s Affiliate Practices

While Honey is a legitimate tool, its business practices came under fire in late 2024 when several YouTubers and online creators accused the extension of hijacking affiliate links. According to critics, Honey was redirecting affiliate commissions at checkout — crediting itself with the sale even if it hadn’t found or applied a coupon. It was also alleged that Honey suppressed more beneficial coupons in favor of those approved by partner retailers.

This led to multiple class action lawsuits against PayPal in late 2024 and early 2025, claiming deceptive marketing, unjust enrichment, and interference with affiliate contracts. The backlash was swift: Honey reportedly lost over 4 million by mid-2025. In response, Google updated its Chrome Web Store policies, banning extensions from claiming affiliate commissions without providing discounts. Honey then updated its extension to comply. These issues have also triggered legal scrutiny of other coupon extensions, including Microsoft Shopping and Capital One Shopping, for similar behavior.

Is Honey Safe to Use Today?

Yes — as long as you’re using the official extension from PayPal, Honey is still safe for everyday online shopping. It does not collect sensitive information like credit card numbers, and it operates within clear limits. However, the controversy serves as a reminder that even trustworthy tools can have gray areas, especially when affiliate marketing is involved.

Here are a few tips to protect yourself:

• Install only from verified sources.
• Don’t click suspicious emails or ads claiming to be from Honey.
• Be wary of unofficial giveaways or messages asking for your login info.
• Review extension permissions regularly.

Protect Yourself with Trend Micro ScamCheck

With the increasing number and sophistication of scams, staying one step ahead is more crucial than ever. Unfortunately, antivirus software alone isn’t enough. Introducing the newly updated Trend Micro ScamCheck! Available for both Android and iOS, ScamCheck offers comprehensive protection from deceptive phishing scams, scam and spam text messages, deepfakes, and more:

• Scam Check: Instantly analyze emails, texts, URLs, screenshots, and phone numbers with our AI-powered scam detection technology. Stay secure and scam-free.
• SMS Filter & Call Block: Say goodbye to unwanted spam and scam calls and messages. Minimize daily disruptions and reinforce your defenses against phishing.
• Deepfake Scan: Detect deepfakes in real-time during video calls, alerting you if anyone is using AI face-swapping technology to alter their appearance.
• Web Guard: Surf the web safely, protected from malicious websites and annoying ads.

To download Trend Micro ScamCheck or to learn more, click the button below.

As ever, if you’ve found this article an interesting or helpful read, please SHARE it with friends and family to help keep the online community secure and protected. Also, please consider clicking the LIKE button or sharing your experience in a comment below. Here’s to a secure 2025!