From gift shopping to looking for fun events, we’re often more active online in the lead up to Christmas.
But did you know that the festive season is also a chance for cybercriminals to strike?
Here’s how to stay safe online over the Christmas and New Year’s period.
What are the most common Christmas scams?
During the holidays, cyber threats spike as more people shop online, book holidays and chat with each other on social media.
If you’re online, these are the key threats to look out for:
Phishing scams
These are fraudulent emails or texts made to steal your personal information.
Watch out for fake Royal Mail, Yodel or Evri emails for those last-minute present deliveries, and suspicious WhatsApp messages.
You can learn more about phishing in our cybersecurity guide.
Charity scams
Christmas is a time when a lot of us will feel inspired to give back, which means it can be the busiest time of year for charities.
But be wary of where you’re donating – cybercriminals can exploit this by creating fake charity webpages to steal money.
Gift card fraud
Phony gift cards can leave you out of pocket if you end up paying for something that isn’t real.
Some malicious websites pretend to sell or buy gift cards – either to get their hands on your money or your unused gift card codes.
Fake websites and ads
There are lots of misleading sites and adverts out there designed to trick you into revealing sensitive information.
Malware and ransomware
Dangerous software that can infect your devices, causing data breaches or theft. These are common on phony websites scam emails, and can cause lots of problems on your devices.
Social media scams
At Christmas, you could run into fake giveaways and impersonations that aim to steal your personal details.
For example, if a company is running a festive giveaway on their Instagram, scammers could make fake accounts for that company.
They’ll tell you you’ve won, and you give them your details to get access to your ‘prize’.
Essential tips for staying safe online at Christmas
Now you know the threats, here are some handy ways you can look out for yourself online this Christmas.
Shop on secure websites
Make sure the website you’re shopping on is secure. Look for URLs that begin with ’https://’ and a padlock icon in the address bar.
That tells you that the site uses encryption to protect your browser’s connection to it. This means your data is coded so it can’t be read and used by anyone.
If you get a message saying something like ‘There’s a problem with this website’s security certificate’, don’t go any further – this could be dangerous. It’s safer to try a different website.
But the padlock icon doesn't guarantee a website is safe to visit. It only means that data sent between your browser and the website is encrypted.
Cybercriminals can still access and exploit these sites, so you should follow the other security measures we've listed here.
Malicious websites can also easily get a padlock security certificate! Use this padlock symbol as a starting point, not a sign that the entire site is safe.
Use customer reviews
Customer reviews are a huge help when you’re trying to figure out if a website can be trusted.
Check review sites like Trustpilot, Yelp and Google Reviews to get an idea of who you’re shopping with.
Use strong and unique passwords
Make sure your passwords are complex and unique for each account. A password manager can help you keep track of them securely.
Combining three random words and a number is a good way to make a unique password, like ‘tablebatcarrot33’.
Be wary suspicious emails or links
Keep an eye out for odd emails and messages, especially those offering deals that seem too good to be true.
Check the sender and avoid clicking on suspicious links.
Turn on two-factor authentication (2FA)
Add an extra layer of security to your accounts by turning on 2FA in your app or account settings.
This adds a second form of verification, like a code sent to your phone or email. It means it’s harder for cybercriminals to get access.
Avoid bank transfers to strangers
Any website that asks for bank transfer instead of online payment is a red flag. Do thorough research around the company to see if you can trust it.
Update your devices
Online scammers are always coming up with new ways to do what they do.
Keep your operating systems, apps and security software up to date to protect your devices against the latest threats.
Use secure payment methods
Credit cards can be safer to use than debit cards for online shopping, as they offer better fraud protection.
You could consider using secure payment services like PayPal, too.
Avoid public Wi-Fi for shopping
Public Wi-Fi networks aren’t always secure. Use a VPN if you need to make transactions or access sensitive information on public networks.
Back up your data
Regularly back up important data to an external drive or cloud storage. It gives you an added layer of protection against the possibility of losing your data after a cyber attack.
Monitor your accounts
Frequently check your bank and credit card statements for any unusual activity. Spotting any fraudulent transactions early can help prevent further damage.
Set up notifications on your online banking accounts so you get told about suspicious activity straight away.
Be careful with delivery notifications
Look out for text messages from the Royal Mail, Evri, and other couriers asking for tracking numbers or payment. You might also get texts about delayed deliveries because of customs issues.
Couriers won't message you asking for extra fees for products you order online. Check with the merchant for updated tracking information.
How to protect yourself on social media
People tend to go on social media a lot more over Christmas as they share festive moments and connect with friends and family.
Make sure you’re doing this safely with our useful tips.
Check your privacy settings
Make sure your social media accounts are set to private and review who can see your posts.
Limit sharing personal information
Avoid posting any sensitive information. That includes your address, travel plans, or details that could be used for identity theft.
Trust your gut
Your gut can be the make or break when you’re thinking about responding to an odd text or using a suspicious website.
Listen to it! If you feel uncomfortable, pressured or in danger, take a step back.
How to protect your texts and calls
Many of us use video calls and messaging apps to stay in touch with loved ones at Christmas. But it pays to be safe!
If you want to report a scam, head to the official GOV webpage.
We’ve also got a great guide on Black Friday and Cyber Monday security.
Using trusted platforms
Stick to well-known, secure communication platforms. You ideally want to use apps that have some kind of encryption on messages, like WhatsApp.
Stay alert
Be wary of unexpected links or attachments sent through messaging apps.
By following these tips, you can protect your online presence and enjoy a secure Christmas and New Year.
Have a cybersecurity ‘safe word’
Cybercriminals are getting smarter. With AI, they can now impersonate you through text messages, emails, and even phone calls.
By setting up a safe word with your friends and family, you can help them to protect themselves against scammers trying to impersonate you.
They can simply ask whoever’s on the phone to say the safe word you’ve agreed on. If they don’t know it, it isn’t really you!
Should I back up my data?
Scams and cybercrime can ruin our devices if they get far enough. They could even mean we lose all our data.
It’s a good idea to back up certain stuff, like important documents, photos, passwords and so on.
Less important data, like rarely used apps or old screenshots, don’t really need to be backed up.
You can do it easily with a USB stick, or you can use a cloud backup option that relies on the internet to store things.
Admiral’s Personal Cyber and Identity Theft Helpline
If you have Platinum Home Insurance or Family Legal Protection as an add-on with us, you have access to our Personal Cyber and Identity Theft Helpline.
This helpline can be used to get support and advice from experienced fraud and cyber specialists if you’ve fallen victim to things like:
- identity theft
- fraudulent fund transfer
- cyber extortion
- financial loss
- breach of personal information
- cyber bullying
The helpline can help you with a range of things, including:
- documenting evidence and filling reports
- notifying authorities and liaising with banks and financial service providers
- securing accounts and helping with password changes
- giving advice on protection
- working out if data back-ups are available
Our cyber specialists will also give you advice on how to protect yourself from any future attacks.
To see if you have access to it, check your cover in MyAccount.
