The Dos and Don’ts of Holiday Online Shopping

During the holiday season, many consumers choose the convenience of doing their shopping online rather than making a trip to brick and mortar retail stores. Although online shopping has its advantages, it can also pose a potential risk for fraud including identity theft and other scams. Identity theft is when a cybercriminal takes your personal information (name, birthdate, bank account number, or Social Security number) to commit fraud. Don’t let your guard down this season and use these tips to stay current and stay protected online.

 

This year, online shopping scams powered by Artificial Intelligence (AI) are on the rise. One of these scams is fake websites, rising 790% in early 2025*. Now, cybercriminals are not only using AI for text message scams and phishing emails (which are increasingly hard to detect), but they are creating “phantom storefronts” that look like a boutique or outlet from trusted brands. Look out for:

 

• Too-good-to-be-true deals or going-out-of-business sales
• Product disclaimers that the image may not be the actual product
• Lack of contact information or shipping / refund policies (do your own research!)
• URLs that look strange or have typos
• No online reviews or suspicious reviews
• Payment options that direct you to another site or to use a bank transfer
• Poor website quality or no social media presence

 

Knowing how to protect yourself is your first line of defense. To help you safeguard your assets during the holiday season, here are some helpful holiday online shopping tips to keep in mind.

 

• Do use strong passwords. If you have login accounts with online retailers, make sure to use complex passwords that can’t be easily guessed and use different passwords for each account. This is especially important if you have your credit card information and address saved. Also, enable the security features on your devices to add another layer of protection.
• Do use multifactor authentication. This extra security step confirms your identity using an additional pre-configured authentication method, such as a code emailed to an account or texted to a mobile number, an extra PIN, or a biometric identifier like facial recognition or a fingerprint.
• Do be cautious when opening emails. With the numerous promotional emails being sent out during the holidays, it’s easy for cybercriminals to disguise themselves and trick you into giving out personal information. These phishing emails may even include links or attachments containing a virus that can harm your computer.
• Do monitor statements. When reviewing credit card and bank statements, watch for unauthorized transactions. Find out from your credit company and financial institution if there’s an option to set up alerts for when suspicious account activity occurs.
• Do check your credit report annually. It’s important to review your credit report at least once a year to make sure your credit score wasn’t impacted negatively by fraudulent attempts. Take advantage of getting a free credit report at annualcreditreport.com.
• Do report lost or stolen credit and debit cards. As soon as you realize your credit or debit card has been lost or stolen, report it to your financial institution. They’ll monitor for any unauthorized purchases and send you a new card so you’re protected from possible financial losses.

Don’t:

• Don’t share personal information. Be sure to limit what you share, especially on your social media pages, and do not respond to unsolicited requests asking for personal information.
• Don’t leave your devices unattended. If you walk away from your computer or mobile device and it’s not password-protected or someone managed to figure out your password, the information on that device can be compromised. Always keep your devices locked and make sure they’re not easily accessible in public.
• Don’t buy from a seller you don’t know. If you don’t know who you’re buying from online, do some research. If you can’t find additional information and are still feeling unsure about the seller, trust your gut. Also, verify you’re using websites with encryption to protect your information.

 

If you believe you’ve been a victim of identity theft, report it to the Federal Trade Commission online here or by phone at 1-877-438-4338.

First Mid is also here to help. Contact your local banker or Fraud Support at 833-488-4723 for more information or assistance.