Author: Jeff Weeks, Senior Vice President and Chief Information Security Officer

Scammers don't take a holiday. In fact, 'tis the season for them to work overtime. You're rushed, chasing deals and expecting packages, and that's exactly what they count on.

Let’s look at current holiday shopping and ways to stay a step ahead.

Key Takeaways

• Pause. Treat every urgent message with suspicion.
• Verify. Shop only where you trust the site and go directly to retailers and carriers instead of clicking links.
• Pay safely. Use a credit card or digital wallet and check your accounts often.

Holiday Scams to Watch For

Scammers lean on urgency. Slow down before you click, call back or pay.

Fake shops and too-good-to-be-true deals. Fraudulent sites copy real brands, and sponsored search results and social media ads can lead straight to them. If a deal looks like a gift, it may be a gift to a scammer.

Be wary of deep discounts, countdown timers and pressure to buy now. Go directly to the retailer's website instead of clicking links in social media, emails or text messages, and leave any checkout page that asks for your Social Security number or date of birth.

Phishing emails and texts. Criminals send messages that impersonate retailers, shipping carriers and banks. Be skeptical of any message asking you to update an account, confirm a payment or verify a shipment. Hover over links to see where they really lead, and do not open attachments from unknown senders.

Fake package notices. These work because so many people are expecting deliveries. If a message claiming to be from UPS, USPS, FedEx or a retailer seems suspicious, skip its link and go to the carrier's website or the retailer's tracking tool instead.

Fake order confirmations. Ignore messages about orders you never placed and never call the number or click the links in them. Check your real account or order history instead.

AI fakes and "family emergency" calls. Scammers use AI to write fake reviews, create fake celebrity endorsements and clone voices. If a caller urgently asks for money, hang up and call the person back on a number you already know.

Gift cards and fake charities. Anyone who demands payment by gift card is a scammer. Before buying a gift card, check that the packaging has not been tampered with, and keep the receipt. Research any charity that contacts you first and donate through its official website.

Fake customer service numbers. Ads and search results can display look-alike support numbers. Use the phone number on the company's official website or on the back of your card.

Social media giveaways and fake job offers. Be skeptical of giveaways and gift exchanges that ask for personal information or a small payment. The same goes for seasonal job offers that require you to pay upfront or share bank details before you are hired.

Package theft. Not every holiday threat is online. Track your deliveries, choose a delivery window or secure pickup location when you can, and bring packages inside promptly.

How to Pay Safely When Shopping Online

Use a credit card or a digital wallet such as Apple Pay or Google Pay instead of a debit card. Credit cards generally offer stronger fraud protection and do not give a thief direct access to your bank account, and wallets send the retailer a substitute number instead of your real card number.

Avoid sending money through payment apps to people you don't know. Most apps offer little or no protection if the item never arrives, and payments are hard to reverse. See our comparison of P2P payment apps. Check your accounts often through the season and report anything unfamiliar to your bank right away.

Account alerts can help you spot trouble early. Most banks and card issuers let you choose alerts by text, email or app notification. Options vary, but commonly include:

• Transaction alerts: a notice when a purchase or withdrawal is over an amount you choose.
• Payment due reminders: a heads-up before a payment is due.
• Transaction status: updates when a transaction is pending, posted or not posted.
• Balance and credit limit alerts: a notice when your balance falls below, or your credit use rises above, a level you set.
• Statement availability: a message when your new statement is ready to review.

Get more tips about online shopping safety.

Simple Cybersecurity Habits to Protect Yourself

A few good habits protect you all year, not just during the holidays:

• Keep your devices and apps updated.
• Use a long, unique password for every account (a password manager helps).
• Turn on multi-factor authentication wherever it is offered.

For more, check out these resources:

• Visit the FNBO Security Center.
• Read our guide to spotting phishing.
• See our personal online safeguards.
• Browse the latest fraud and security tips.

If You Think You've Been Targeted

Act quickly. The sooner you respond, the better your chances of limiting the damage.

Contact your bank or card issuer right away to report the charge and lock or replace the card. Change the passwords for any account involved, turn on MFA and run a security scan if you clicked a suspicious link. Watch your statements and credit reports in the weeks ahead and report the scam to the FTC and, for online crime, the FBI's Internet Crime Complaint Center.

About the Author

Jeff has been with FNBO for more than 27 years and is currently the Senior Vice President and Chief Information Security Officer. The executive leadership and oversight provided by Jeff in the development, management, and execution of information security for FNBO enables the company’s ability to posture and protect private, personal information, and assets of the company’s clients, employees, and business partners.