Cybersecurity Tips: How to stay safe shopping online this holiday season

The holiday season is here, and with that comes the temptation to spend some time online shopping, especially around the Black Friday or Boxing Day sales. Online shopping has made finding the perfect gift - or a treat for yourself - easier than ever, but it also brings risks and it’s crucial to remain vigilant— cyber scams are on the rise, and scammers continue to become more advanced, ready to take advantage of unsuspecting shoppers.

The NCSC (National Cyber Security Centre) has launched a campaign called ‘Stop! Think Fraud’, encouraging us to think twice before engaging in our online activity, and taking time to evaluate if certain scenarios are legitimate and secure, or a potential threat. As part of this, becoming educated in the fundamentals of being secure online is essential to preventing cybercrime and feeling empowered when making secure decisions.

At Moneyboat, we understand how important your finances are during the holidays and understand that keeping your financial details safe is essential. With that in mind, we’ve put together six smart, fundamental holiday cyber security tips, to protect yourself and shop with peace of mind.

1. If it’s too good to be true, it might be

A luxury watch at 70% off, or a top-tier gaming console for half the price? Deals like these can be enticing but can sometimes be scams. Fraudsters use unbelievably low prices to attract shoppers into fake websites or transactions, leaving them empty-handed and out of pocket.

In this instance, you may feel in doubt of something so it’s best to avoid impulsive purchases where the source may look sketchy. Stick to trusted retailers, and if you’re unsure, search for customer reviews. Protect yourself and your finances if you feel in doubt of something, and avoid putting yourself at risk. Black Friday is a peak time for scammers to prey on people looking for a great deal, so make sure you’ve read our tips on how to avoid Black Friday scams before you start shopping.

2. Beware of Phishing scams, remain sceptical

Phishing scams often come disguised as emails or messages claiming you’ve won a prize, unlocked a deal, or need to confirm an account. These messages trick you into sharing personal and financial information, like passwords or credit card details or they may lead you to fake websites that are designed to steal your personal information.

Online scams, such as Phishing, can come in all different forms, on email, text, social media, on websites…practically most online applications or sites. These tactics can mimic authentic communications, logos, URLs and more, so remain vigilant and if you’re ever in doubt, check the following:

• Is the greeting personal or generic?

• Are there grammar and spelling errors?

• Check email and sender domain matches

• Are there suspicious attachments or links? Never click these.

• Evaluate logo and graphics quality. Does it look legitimate?

• Is there a sense of urgency or threat?

• Caution any requests for personal info/payment details as official organisations will never ask for these. Call the company to verify if in doubt.

3. Stay calm, don’t let pressure tactics rush you

Scammers like to create a sense of urgency with phrases like “only a few left!” or “deal ends in minutes!” to put people on edge and encourage us to feel we have to act quickly; while it’s natural to want a great deal, rushing often leads to mistakes.

In this case, it’s important to take a step back before making a purchase. Check for signs of legitimacy, like secure payment options (look for ‘https’ instead of ‘http’ in the URL and a padlock in the URL bar), proper contact details, and customer feedback. Rushing can turn a great deal into a costly mistake.

4. Stay alert to AI scams

AI has upped the game for scammers, enabling them to create convincing “deepfake” videos, voice messages, phone calls and phishing emails. These scams can feel more legitimate than ever, making it harder to spot fraud.

Be wary of unexpected communications, especially if they pressure you to act quickly. Whether it’s a fake customer service call, unexpected or urgent call or text from a family member or friend, or an unusually realistic email, take the time to verify authenticity before responding.

5. Enable 2-step verification

Where you may be creating online accounts, using your online banking more or shopping online, an easy added step for your online security is to enable 2-step verification on your accounts and devices, also known as 2-factor authentication. This acts as an added layer of online security, ensuring that in instances a criminal may access your account or passwords, you’ll receive a notification on another device or account, that you’ll have to verify to ensure it's actually you.

Adding this is quick and simple, and once enabled, will usually only ask you to re-verify every so often rather than every time. So in the long run, it provides peace of mind and immediate security.

6. Be cautious of delivery service scams

Another type of scam to remain cautious of around this time of year is surrounding fraudulent package deliveries or delivery notifications from well-known couriers. These are on the rise, especially during busy shopping periods like Black Friday. It can be easy to fall victim to these, as we all know the feeling of wanting or needing our parcels quickly and stress-free.

The criminals often impersonate well-known delivery companies like Evri, Yodel, FedEx, or Royal Mail to trick consumers into giving up personal information or paying bogus fees. Here’s a few holiday cyber security tips to help you spot and avoid these common delivery scams:

1. Fake tracking emails or texts

Scammers send emails or texts claiming there's an issue with your delivery, urging you to click on a link to resolve it. These links often lead to phishing websites designed to steal your login credentials or personal information.

2. Payment or customs fee demands

You might receive a message asking for a small payment to release a package or cover "fees." Legitimate delivery companies don’t demand extra payments after you’ve already placed an order.

3. Missed delivery notifications

Fake “missed delivery” notices often include a phone number to reschedule your delivery. Calling this number may connect you to premium-rate lines or expose you to additional scams. It may also be sent to you via email or SMS, with a link which may not be legitimate, and will encourage you to put in your card or personal information and at this point it will be compromised.

Here are a few more tips for protecting yourself from delivery scams around Christmas and the holidays:

• To protect yourself, always verify notifications directly by visiting the delivery company’s official website or app to check your tracking information, as these are typically updated at every stage of the process.

• Avoid clicking on links in unsolicited messages.

• Pay close attention to the sender’s email address, as scammers often use ones that look official but include subtle misspellings or extra characters, such as "evri-services.com" instead of "evri.com."

• Be cautious of messages that create a sense of urgency, as legitimate companies rarely pressure you to act immediately.

• Finally, never share sensitive information like bank details or other personal information, as delivery companies will usually never request such details.

Report scams: protect yourself and others

Encountering a scam can be frustrating, but reporting it can help others avoid falling into the same trap. Here’s how you can take action:

• Suspicious emails: Forward them to report@phishing.gov.uk.

• Suspicious texts: Forward them to 7726 (it’s free).

• Misleading ads: Report these to the Advertising Standards Authority or directly to search engines like Google or Bing.

If you’ve been a victim of fraud, act quickly:

• In England or Wales, contact Action Fraud at 0300 123 2040 or online.

• In Scotland, report it to Police Scotland.

Protect your holiday budget

According to the National Cyber Security Centre (NCSC), UK shoppers lost over £11.5 million to online scams during the November 2023 and January 2024 holiday season, with an average loss of £695 per victim. That’s money that could’ve been spent on gifts, bills, or paying off loans.

The holidays should be about joy and celebration—not stress over fraud. By following these tips, you can shop confidently, keep your finances safe, and enjoy the magic of the season. And for more support with your finances around the holidays, read through our blogs on how to have a guilt-free Christmas, and how to do Christmas on a budget.