The holiday season is a time of joy, generosity, and, of course, shopping. Unfortunately, the increased volume of online shopping also attracts cybercriminals eager to exploit the rush with scams and fraud schemes. In 2023, online purchase scams were estimated to make up nearly 42% of total scams worldwide.1 By understanding the risks and staying vigilant, you can protect yourself and shop safely.
Common threats
One of the most common threats is fake websites designed to steal your personal and financial information. These sites mimic trusted retailers with convincing branding, slightly altered URLs, and enticing “deals” to lure unsuspecting shoppers. For instance, scammers have created sites like Northfacedeals[.]shop or Northfacecoat[.]shop to impersonate the popular outdoor retailer, The North Face. Shoppers who enter their credentials or payment details on such sites, risk exposing sensitive information to attackers.
Another rising concern is account takeover (ATO) attacks, particularly during high-traffic shopping days like Black Friday. Cybercriminals use stolen login credentials to access accounts, make unauthorized purchases, or steal stored payment details. Fake order and delivery notifications are also rampant, sent via email or text to trick users into clicking malicious links or sharing personal details under the guise of resolving an issue.
Gift card scams remain a consistent problem. Fraudsters often impersonate retailers or even employers, persuading victims to purchase gift cards and share the codes, which are drained instantly. Similarly, website spoofing has become increasingly sophisticated, with scammers creating nearly identical replicas of legitimate sites to deceive unsuspecting shoppers.
In 2023, online purchase scams were estimated to make up nearly 42% of total scams worldwide.1
How to mitigate risk
To protect yourself, stick to trusted retailers and double-check URLs for typos or unusual formatting. Always ensure the site begins with “HTTPS” and displays a padlock icon in the browser. Be wary of unsolicited messages about orders or deliveries, verifying any claims through official retailer channels.
Consider using virtual credit cards, which provide temporary payment details, reducing the risk of fraud. Avoid public Wi-Fi networks unless connected through a trusted VPN, and secure your accounts with strong, unique passwords and multi-factor authentication.
Cybercriminals are growing more sophisticated every year, but staying cautious and adopting these simple practices can help you outsmart their tactics. By taking the time to verify and protect, you can enjoy a safe and hassle-free holiday shopping season.
1Online purchases as percentage of total scams reported worldwide from 2015 to 2023, Statista.