The holiday season is a prime time for cybercriminals and scammers. Remember, it’s better to be suspicious than be full of regret. Our goal is to ensure these next few months aren’t spoiled by online threats. Here is our guide to protecting yourself and your business during this busy time.

A List of the Top Scams of the Season

• Phishing and Smishing: Emails and text messages disguised as shipping notifications, delivery failures, or urgent account issues from major retailers. These links lead to fraudulent websites designed to steal your login credentials or payment information.
• Fake Websites/Stores: Sophisticated counterfeit websites, often advertised on social media, offering unbelievable deals on popular or hard-to-find items. The products never arrive, or the site captures your financial data.
• Gift Card Draining Scams: Scammers steal or tamper with gift cards in stores, recording the card number and PIN. They wait for the card to be activated and then quickly drain the balance before the recipient can use it.
• Charity Scams: Fraudulent appeals for donations to take advantage of the season of giving. Scammers mimic legitimate charities, especially after natural disasters or in the run-up to year-end tax deadlines.
• Travel and Booking Scams: Fake deals on flights, hotels, or rental cars are advertised through phishing emails or social media, leading you to fake booking sites that steal your money and personal information. For those traveling for the holidays, the National Cybersecurity Alliance offers great tips for securing your vacation plans.

For more in-depth information on how to spot and report these threats, consult the Better Business Bureau’s guide on holiday scams.

Recommendations for Consumers During the Busy Holiday Season

• Be Skeptical of Deals: If a deal seems too good to be true, it likely is. Buy directly from reputable retailers’ official websites or apps.
• Shop Smart for Privacy: When purchasing gifts, especially smart devices, check resources to ensure the product meets your privacy standards.
• Check the URL: Before entering payment or login details, ensure the website address is correct and starts with https://. Look for the padlock icon in the browser’s address bar.
• Use Strong, Unique Passwords and 2FA: Use a password manager to create and store complex passwords for all your online shopping accounts. Enable two-factor authentication (2FA) wherever possible.
• Monitor Accounts: Use a credit card for online purchases, as they offer better fraud protection than debit cards. Check your financial statements regularly for unauthorized transactions.
• Secure Your Wi-Fi: When shopping from home, ensure your wireless network is protected with a strong password. Avoid making purchases or checking sensitive accounts while on public Wi-Fi.

Recommendations for Businesses During the Holidays

• Train Employees on Phishing: Remind staff to be vigilant against internal and external phishing attempts, especially emails related to invoices, vendor payments, or urgent password changes.
• Patch and Update Systems: Ensure all business software, operating systems, and security tools are fully patched to protect against known vulnerabilities that cybercriminals exploit during busy periods.
• Secure IoT Devices: Any “smart” devices (e.g., security cameras, temperature sensors) used in the workplace must be secured. Change default passwords and isolate them on a separate network segment from your core business data.
• Review Access Controls: Temporarily increase scrutiny of access requests for new or seasonal employees and limit access to only the systems and data absolutely necessary for their roles.
• Have an Incident Response Plan: The holidays are not the time to be caught off guard. Ensure your team knows the steps to take immediately following a security incident, such as a data breach or ransomware attack.

Don’t let cyber threats steal your holiday cheer. Protect your family and your business this season with proactive cybersecurity. Contact us today for a free security consultation and learn how our technology can keep you safe.