Tips to shop safely online over the holiday season

Don't let cybercriminals ruin the Christmas spirit. Here are some essential tips and reminders for shopping safely online this December.

December is often a time when emergency services are on high alert – whether because of bushfires or the usual spate of holiday accidents. And if you're squeezing in some shopping on your mobile or computer between shifts, it also pays to be alert online.

How big is the risk? The Australian Consumer and Competition Commission’s Scamwatch says Australians have already lost around $12.9 million to online shopping scams this year, including fake online deals, faked stores on social media platforms and delivery scams. You may even have had a brush with a fraudster yourself: a recent poll by the Customer Owned Banking Association found that eight in 10 Australians had received a suspicious message or phone call in the past two years – and one in four did what was asked of them.

Here are some of the most common techniques fraudsters use, and how to avoid them.

Stay vigilant with text messages and emails

Scamwatch says the volume of fake text messages and emails has skyrocketed over the last few months, with fraudulent package delivery messages especially common. And there isn’t just one type of threat to look out for. Scammers can use fake messages for:

Malware: tricking you into clicking a link or opening an attachment that installs malware so they can steal passwords or track you.

Phishing: fake messages designed to fool you into revealing sensitive details – by sharing your banking or shopping logon and password, for example.

Misdirection: sending you to a fraudulent shopping or deals website, often designed to mimic a real site.

Whether you’re on your mobile or home computer, it pays to be vigilant. Remember, email headers can be falsified, and a call or text that appears to be from an Australian number can be spoofed.

Be aware of fake websites

It doesn’t take long for a scammer to set up a false website imitating a genuine company. Mobile websites are often shortened versions of the full site, making it harder to spot fakes. Don’t let your guard down when shopping on mobile – check the URLs of the website of any payment gateways. And be sure to take the same precautions when shopping on social media.

Fraudulent parcel delivery messages

Scammers know Christmas is a peak period for deliveries – and they’re ready to take advantage of it. Watch out for messages claiming to be from Australia Post or a courier, asking you to share credit card details to have a parcel released. Once the scammers have your card details, they can start taking advantage of them – sometimes months down the track.

Some tips to keep you safe over the holiday season

If you get a text or email from an unknown sender asking you to click a link, delete it without opening. You can also report the sender to Scamwatch.

Beware of sellers asking you to use an untraceable payment method, such as a gift card or cryptocurrency. Using your credit card, debit card or PayPal is usually the safest way to shop, and sites that offer these payment methods are more likely to be trustworthy.

Make sure you have up-to-date anti-virus software on your PC or Mac and that it’s set to automatically scan your computer regularly. You can also consider installing a security solution for your phone that allows it to be locked and wiped remotely, should it be lost or stolen.

Instead of clicking a link in an email, visit shopping websites by searching for them in Google or another search engine, then check the URL carefully.

Be careful who you share your personal information with. Avoid sending personal details via email, and if you receive a suspicious phone call asking for financial details or access to your computer, hang up, and report the number to Scamwatch.

Have a safe and Merry Christmas

Visit our security page for tips on how to keep personal information and money safe online, and check out the Scamwatch website for alerts on current scams.