Authored by Jake Moore, Global Cybersecurity Advisor, ESET
The festive season brings a welcome rush of celebration. From online shopping to video calls with loved ones, social media sharing and digital gifting, every shopping season is not just an exciting time for retailers and consumers, but cybercriminals as well.
Cybercriminals now operate like software startups — fast, agile, and quick to deploy new tactics. They often rely on convincing visuals and time-limited offers, especially on social media, where flashy bargains may not be vetted to the standards people expect.
There is typically more fraud during the festive season because a perfect storm of factors elevates the risk of online scams: more people shop online, creating a larger pool of potential victims, the higher volume of purchases makes it easier for fraudsters to hide fraudulent transactions among legitimate ones, and the flood of marketing emails provides cover for malicious messages.
Top holiday season scams
While not limited to India, watch out for the following tactics from bad actors:
Gift cards & malicious e-cards - Scammers may offer fake or stolen gift cards at steep discounts or as fake prizes to trick victims. Meanwhile, festive digital greetings may carry malware or phishing links, disguised with realistic branding to appear legitimate.
Phishing websites – Fake retail sites mimic real brands to steal your personal and financial info, often luring you in with massive discounts on popular items.
Too-good-to-be-true deals – Fraudsters sell high-demand products at unbelievable prices via social media or marketplaces, but the products never arrive.
Smishing (SMS Phishing) – A form of social engineering where the attacker sends a text message to a target with a malicious link or request for sensitive information, pretending to be a trustworthy source, such as a bank or merchant.
Fake shipping notices – Impersonating delivery services, scammers send emails or texts (Smishing) requesting personal info or spreading malware under the guise of a missed delivery.
Prize draw scams – Fake giveaways collect your personal info, which is then used for fraud or sold on the dark web—no prize ever arrives.
Charity fraud – Scammers create fake charities with phishing sites and donation pages to steal card info and cash.
Fake seasonal jobs – “Easy money” job ads aim to steal personal data or charge sign-up fees. Common hooks include remote work or mystery shopping.
How to stay safe from festive scams
As long as scammers continue profiting from these schemes, they’ll keep recycling the same tricks. Fortunately, that means proven best practices remain effective and essential:
Be sceptical of anything that seems too good to be true — even deals shared by friends and family members
Install reputable cybersecurity software on all devices
Avoid bank transfers or instant cash apps for purchases — credit cards typically offer more fraud protection
Always scrutinize website URLs and email senders for typos or grammatical errors that may signal a fake
Just as importantly, stay informed. Scammers constantly evolve their techniques and the best way to stay protected is to stay updated. ESET’s WeLiveSecurity blog regularly shares the latest scam alerts, real-world examples, and expert tips to help users recognize and avoid emerging threats.
And if you do fall victim to a scam, act fast to limit the damage:
Cease all contact with the scammer — and don’t explain why
Report the incident to local authorities
Contact your bank, freeze your cards, and request replacements
Keep a record of all evidence in case it's needed for further action
𝐒𝐭𝐚𝐲 𝐢𝐧𝐟𝐨𝐫𝐦𝐞𝐝 𝐰𝐢𝐭𝐡 𝐨𝐮𝐫 𝐥𝐚𝐭𝐞𝐬𝐭 𝐮𝐩𝐝𝐚𝐭𝐞𝐬 𝐛𝐲 𝐣𝐨𝐢𝐧𝐢𝐧𝐠 𝐭𝐡𝐞 WhatsApp Channel now! 👈📲
𝑭𝒐𝒍𝒍𝒐𝒘 𝑶𝒖𝒓 𝑺𝒐𝒄𝒊𝒂𝒍 𝑴𝒆𝒅𝒊𝒂 𝑷𝒂𝒈𝒆𝐬 👉 Facebook, LinkedIn, Twitter, Instagram