Easy Steps to Safe Online Shopping, Part II

The holiday season is here and with it come the joys of festive celebrations and gift-giving, both leading to a surge in online shopping. While browsing through virtual aisles for that perfect gift or decoration can be exciting, it also creates conditions favorable to cybercrime. Bad actors know that millions of people are making transactions online, and they’re ready to take advantage of unprepared shoppers. According to a recent?AARP survey, around 80% of shoppers reported experiencing fraud attempts during the holidays last year.

Whether shopping online or heading out to support your favorite shop in person, financial transactions all occur online in some way. Last year, we shared a lot of valuable information in the?shopping cybersecurity newsletter and accompanying?video. This year, we have additional tips to make sure you are up to date on the most dangerous scams impacting the holiday season. By staying vigilant and making smarter decisions, everyone can avoid unnecessary headaches and focus on what really matters—spreading cheer!

Consider using virtual credit cards or digital wallets.

• Instead of entering your primary credit or debit card information directly, consider using a virtual credit card or digital wallet for online purchases. These tools create a unique, single-use card number or token, so your real card details are never exposed.
• Single-use card numbers can help minimize the risk of fraud if the retailer's site is compromised.
• Digital wallets add an extra layer of protection by storing your payment information securely.
• Reduce exposure to theft by ensuring your real card number is not shared with multiple online stores.
• Virtual cards are easy to track and manage, allowing you to set spending limits and view transactions easily.
• Using these payment methods on a smartphone at physical brick and mortar stores is typically more secure than a physical credit or debit card.
• Research secure digital wallets and virtual credit cards and only use these services from trusted providers.

Beware of unrealistic deals.

• We have all seen bright, flashy ads promising huge discounts, limited time offers and once-in-a-lifetime deals.
• While some discount offers may be legitimate, others could be traps set by cybercriminals to steal your information.
• Research the offer and the site before taking advantage of any deal to verify that it’s trustworthy.
• Go directly to the seller’s trusted website to see their holiday deals. Do not click on deals received via email, text message or online advertisement.
• Watch out for unrealistic discounts, especially those that seem far too low compared to market prices.

Look for red flags in emails and messages.

• Phishing scams often spike during the holiday season. Criminals pose as legitimate retailers or shipping companies in order to steal personal information.
• Don’t click on links in unsolicited emails or text messages. Instead, go directly to the retailer’s website to check for promotions or orders.
• Cybercriminals have gotten even more savvy in their phishing tactics, using AI tools to gather a victim’s habits, likes and dislikes to craft a well-worded message that is relevant to those interests. Scammers can also utilize AI to create realistic products and entire websites in an effort to steal your personal identifiable information (PII).
• If the sender email address seems off or unfamiliar, it’s a sign the message may not be legitimate. Verify the sender before opening the email.
• Use?multifactor authentication (MFA) wherever possible to add an extra layer of security to online accounts and alerting you to any suspicious activity.

Monitor bank and credit card statements regularly.

• After making purchases, check your bank and credit card statements to quickly identify any unauthorized transactions or duplicate charges.
• Set up alerts with your bank and credit card company to receive notifications for any charges made to your account. Immediately report any discrepancies to your bank or credit card provider and make sure to follow up on any suspicious activity.
• Consider?freezing your credit temporarily if you’re concerned about identity theft, as this prevents new accounts from being opened in your name.

Verify shipping notifications.

• Fraudulent shipping notifications via email or text (SMS) messages are a favorite trick of scammers.
• Do not click any links sent to you regarding shipment of an item. Use the tracking number that was emailed directly from the verified seller’s email address. Research the sender’s email address via your preferred online search engine.
• When in doubt, go to the company’s official website, call the company directly to check on your package or go to the shipping company’s physical location, if possible.

While the convenience of online shopping makes it easy to get all the gifts on your list from the comfort of your home, it’s crucial to be aware of the inherent risks of the process. By following these tips and staying vigilant, you can help ensure that your holiday shopping season is as stress-free as possible. Don’t let cyberthreats ruin your festive fun; take the steps necessary to keep your personal information safe. Happy shopping and stay secure!

?

Additional Resources

• CISA:?Shop Safely This Holiday Season
• BBB: Scam Tracker
• AARP:?Holiday Shopping and Scams Survey Summary
• FBI:?Internet Crime Complaint Center

?

Cyber Habit of the Month

Remember to take proper precautions on video calls. Be sure the device you’re using, whether it is a laptop or a smartphone, has the latest security updates and is using the latest software/app version. Choose an app from an official store associated with your device’s manufacturer that has good reviews. Take time to examine all security settings and enable those that will ensure that you connect only with your intended contact. For example, you can hide your phone number and only allow those on your contact list to call you. Review the privacy settings, and check that the app or software uses end-to-end encryption, as well as ensure that the program only uses your camera and microphone when using the app to make calls. By taking these quick steps, you can be sure you’re only sharing your holidays with your intended loved ones!