Don’t get Scrooged—9 Holiday shopping scams to avoid

It’s that magical time of year again—bells jingling with cheer, lights twinkling with joy, and an inbox full of “too-good-to-be-true” deals. Yes, the season of giving is also the season of taking—if you aren’t careful.

Online holiday shopping is great, but it can also open opportunities for scammers to strike. Let’s make sure your hard-earned cash goes towards an amazing gift, not a cybercriminal’s pocket.

Why online holiday shopping is a risk

Online shopping is a double-edged sword. It’s fast, convenient, and offers endless options. However, a keen eye that can spot scams is essential. Here’s why:

• Anonymity is their shield. Cybercriminals hide behind fake websites or spoofed emails, making it hard to track them.
• Scammers love vulnerabilities. From unsecure websites to dodgy Wi-Fi networks, they know exactly where to strike.
• Everyone’s online. In the U.S. alone, 97% of holiday shoppers plan to buy gifts online, increasing the pool of potential victims.

Common holiday shopping scams and cyber risks

When it comes to holiday shopping risks, there are some repeated offenders that you may need to keep an eye out for. Check out what made the list below.

1. Public Wi-Fi dangers

Shopping on public Wi-Fi is like shouting your credit card info in a crowded room. Cybercriminals can intercept your data, so stick to secure, private networks—or use a VPN.

2. Fake online stores

Ever seen a luxury item for a third of the price? Scammers create realistic-looking websites with rock-bottom prices to lure you in. Always check the URL for typos or inconsistencies and verify the site's legitimacy through reviews.

3. Malware-laden links

Clicking that “too-good-to-be-true” email offer might download malware onto your device. This can lead to scammers stealing your personal data and banking information, among many other headaches. Use strong cybersecurity software to help protect yourself.

4. Phishing scams

Phishing emails or texts disguised as order confirmations or urgent requests often lead to fake sites. Once you “log in,” the scammer steals your credentials. If you’re not sure, verify messages with a scam detector like Norton Genie to help you weed out the fakes.

5. Fake delivery notifications

Expecting a package? Scammers send fake shipping alerts, asking you to click a link to update delivery info. This link could install malware or phish your data. Be careful before clicking the link absent-mindedly.

6. Gift card scams

Beware if someone asks you to pay a debt or fine with a gift card. No legitimate organization will request payment this way. Once you send the card details, your money is gone.

7. Data breaches

If a retailer suffers a breach, your stored payment info could end up in the wrong hands. Minimize risk by using virtual credit cards. Also, check if your cybersecurity suite includes dark web monitoring.

8. Cross-site scripting (XSS)

XSS attacks embed malicious code into trusted websites. Shopping platforms with weak security measures are particularly vulnerable. Purchase from reputable websites to help minimize the risk.

9. AI chatbots

For AI chatbots to be helpful, they may have access to some of your information, such as your order tracking number and address. These chatbots may be vulnerable to cyber attacks. Be careful what you share when using them.

7 Easy-to-do tips to help you stay safe while shopping online

Risks aside, you can shop smart and take some general precautions to help keep your information secure. Follow these practical tips to help you stay safe:

• Stick to trusted sites. Check for HTTPS in the URL and avoid obscure retailers without a track record.
• Be skeptical of deals. If it’s too good to be true, it probably is.
• Use secure payment methods. Credit cards offer more fraud protection than debit cards, and virtual cards are even safer.
• Keep software updated. Ensure your browser, antivirus, and OS are up to date to block vulnerabilities.
• Avoid clicking suspicious links. Instead, type the retailer’s website directly into your browser.
• Protect your network. Use a trusted VPN when shopping on-the-go or over public Wi-Fi.
• Use cybersecurity tools. Apps like Norton Genie, our free AI-powered scam detector, may help you spot a scam before it’s too late.

Stay merry and dodge online shopping scams

The holidays should be about joy, not stress. Taking steps to be Cyber Safe this holiday season can help keep your shopping carts secure and protect your peace of mind. Get your wish list and shop with confidence. Happy holidays!

FAQs About Holiday Shopping Scams

How common are holiday scams?

Unfortunately, they’re common. According to our Norton Holiday Cyber Safety Insights Report, 30% of U.S. consumers have reported being targets of scams while holiday shopping.

What can I do about online shopping scams?

If you spot one, report them to the retailer, your bank, or agencies like the Federal Trade Commission (FTC).

Is it still possible to get scammed despite precautions?

Yes, but staying vigilant and informed may significantly lower your risk.

How do I report online shopping scams?

Use tools like Norton Genie to identify scams and report them to agencies like the FTC or the FBI.