Cybersecurity

Staying Secure This Holiday Season: Common Scams and How to Protect Yourself

infosec-banner-image
In brief

As the holiday season approaches, we typically see a sharp rise in scams targeting individuals. Today’s scammers are increasingly sophisticated, using artificial intelligence to generate highly convincing emails, texts, websites, and even voice calls.

The most important thing to remember: If the communication is unexpected, urgent, or includes a request for personal or financial information, stop and verify.

Below is an overview of the most common holiday scams we’re seeing this season, and how to avoid them.

Scam TypeHow It WorksHow to Spot and Avoid
Delivery and Shipping Texts
  • Scammers take advantage of increased holiday generosity by creating fake charities or lookalike donation sites.
  • Messages may claim a package is delayed and prompt you to update your address or click a link.
  • These scams often impersonate carriers such as UPS, FedEx, or USPS by using fake tracking links or phone numbers.
  • Clicking the link may allow them to steal personal information by requesting sensitive data such as Social Security numbers.
  • Watch for unexpected texts or emails about missed deliveries or extra fees, especially if you weren’t expecting a package.
  • These messages often come from unfamiliar numbers and include shortened or suspicious links.
  • Don’t click links or call phone numbers provided in unsolicited delivery notices; instead, track packages through the retailer’s or carrier’s official website or your order confirmation email.
  • If you’re unsure, look up the company’s official customer service number. Never use the contact information in a suspicious message.
Fake Retail Websites and Ads
  • Scammers now use artificial intelligence to clone legitimate shopping websites to steal payment information or sell fake goods.
  • These fake sites often use URLs that are just one character or domain different from the real one (e.g., “.co” instead of “.com”).
  • Promotional emails or social media ads may direct you to these lookalike sites with unusually deep discounts.
  • Popular brands such as Apple, Amazon, and luxury retailers are frequent targets for impersonation.
  • Pay close attention to website links. Look for slight spelling differences, low-quality images, or deals that seem too good to be true.
  • Stick to trusted retailers and double-check URLs before buying, and if an urgent deal appears, visit the retailer’s official website directly rather than clicking a link.
  • For stronger fraud protection, use a credit card when possible, rather than debit or gift cards.
Phishing Emails (Fake Deals or Issues)
  • Expect an increase in scam emails pretending to be from popular retailers offering big holiday sales or exclusive deals.
  • Some emails may claim there is an order problem or a refund issue and urge you to respond quickly.
  • These messages can appear legitimate, with perfect grammar, accurate branding, and real logos.
  • The links in these emails are designed to steal your login credentials, personal information, or payment details.
  • Watch for generic greetings, minor logo or image discrepancies, or email addresses that don’t match the official company domain.
  • Do not click links or open attachments in unexpected or unsolicited emails. Remember: If it’s unexpected, it’s probably unwanted.
  • Verify any offers that appear to be too good to be true or urgent account alerts by visiting the retailer’s official website or app directly.
  • If you are unsure whether a message is legitimate, contact the company using its official customer service channels.
Charity and Donation Scams
  • Scammers take advantage of increased holiday generosity by creating fake charities or lookalike donation sites.
  • They may send emails or make phone calls using emotional stories to pressure you into giving.
  • Criminals often mimic real charity names or claim to be raising money for disaster relief or veteran support.
  • Their goal is to steal your donation money or capture your payment information.
  • Be cautious of high-pressure charity appeals, especially from organizations that contact you unexpectedly or you do not recognize.
  • Watch for slight name variations that mimic legitimate charities.
  • Research any charity before donating by typing its official website directly into your browser or using trusted resources such as Charity Navigator.
  • Do not donate through links in unsolicited emails or calls. Give only through official sites or known campaigns, and never send cash, gift cards, or wire transfers.
Gift Card or Prize Scams
  • Gift cards are a common tool for scammers because they provide quick, irreversible access to money.
  • Some criminals tamper with gift cards in stores by copying card numbers and draining the funds as soon as the card is activated.
  • Other scammers demand payment in gift cards, often by impersonating executive team members, coworkers, or organizations and requesting Apple, Amazon, or eBay gift cards.
  • Scammers may also claim you won a prize or lottery that requires buying gift cards or paying fees, but once you provide the funds, they cannot be recovered.
  • Be suspicious of anyone requesting payment in gift cards. No legitimate company or government agency uses gift cards as a payment method.
  • Use caution if someone claiming to be a supervisor, colleague, or contest representative contacts you unexpectedly, urges secrecy, or pressures you to act quickly.
  • Inspect gift cards before buying, avoid cards with damaged packaging or exposed PINs, and verify any unusual requests by calling the person directly.
Impostor Scams (Family or Government)
  • These scams exploit emotional pressure or urgency to gain your trust.
  • Criminals may use social media information or AI-generated voice technology to impersonate a family member in trouble, such as claiming they were in an accident or are stranded and need money.
  • You may receive a call that sounds like a relative, such as a child, grandchild, or cousin, asking for immediate financial help.
  • Scammers may impersonate government officials, claiming to offer a fake “tariff rebate” or special grant, and insist that you provide personal information to receive the money, even though no such program exists.
  • Be cautious of urgent requests for money or personal information over the phone, even if the caller sounds familiar. Scammers can spoof caller ID and use recorded or AI-generated voices.
  • If you receive a panicked call from someone claiming to be a relative, pause and verify by hanging up and calling them or another family member back on a known, trusted number. Consider establishing a family code word for verification.
  • For calls or emails claiming to be from government agencies, remember that legitimate agencies will not contact you about unexpected rebates or ask for sensitive information by phone or email.
  • Never provide Social Security numbers, account details, or payments based on an unsolicited call. Contact the official organization directly if you need to confirm whether the communication is legitimate.

Final Thoughts

If you receive any suspicious email, text, or phone message, pause before responding. Verify requests using trusted contact information, not the details provided in the message.

By staying vigilant and cautious, you can help protect your personal information and financial security this holiday season.

To learn more about cybersecurity best practices, please contact your Bessemer advisor.

This material is for your general information. It does not take into account the particular investment objectives, financial situation, or needs of individual clients. This material is based upon information obtained from various sources that Bessemer Trust believes to be reliable, but Bessemer makes no representation or warranty with respect to the accuracy or completeness of such information. Views expressed herein are current only as of the date indicated, and are subject to change without notice. Forecasts may not be realized due to a variety of factors, including changes in economic growth, corporate profitability, geopolitical conditions, and inflation. Bessemer Trust or its clients may have investments in the securities discussed herein, and this material does not constitute an investment recommendation by Bessemer Trust or a offering of such securities, and our view of these holdings may change at any time based on stock price movements, new research conclusions, or changes in risk preference.

Photo of  Vikas Bangia

Vikas Bangia

Co-Chief Information Security Officer

Vikas is responsible for providing strategic guidance on security architecture and operations. He serves as Chair of the Corporate Information Security & Privacy Committee (CISPC) and is a member of the Crisis Management Operations Team, Digital Technology Committee, Office Closure Team, and Operational Risk Management Working Group.