12 top tips to keep you shopping safely online this Christmas
Cybercrime typically increases during the Christmas period. Cybercriminals often exploit the heightened online activity, including increased shopping, travel bookings, and charitable donations, to target individuals and businesses. This trend is supported by various cybersecurity reports and statistics showing a spike in malicious activities during the holiday season.
As more UK shoppers turn to the internet for convenience and deals, it’s essential to prioritise safety.
UK shoppers can enjoy a secure and stress-free online Christmas shopping experience by following our tips below.
Remember: Stay vigilant, prioritise security, and plan to ensure that your festive shopping brings joy, not cyber troubles!
- Shop on Trusted Websites
Stick to reputable retailers: Use websites you know and trust, such as major retailers or those with strong customer reviews. For lesser-known sites, check their credentials and history through platforms like Trustpilot.
Always ensure the website starts with “https://” and has a padlock icon in the browser address bar. This indicates a secure connection.
Avoid redirected links, as scammers often send links that appear to be from well-known brands but redirect to fraudulent sites. Type the retailer’s web address directly into your browser instead of clicking on links from emails or adverts.
Did you know? Brits reported losing over £11.5 million to online criminals between November 2023 and January 2024 – with each victim losing £695 on average.
A quarter of all scam victims have lost money over Christmas – here is an excellent article from theSun.co.uk - https://www.thesun.co.uk/money/5037960/parents-desperate-to-buy-the-perfect-christmas-present-are-at-risk-of-becoming-scam-victim/
- Use Strong, Unique Passwords
Create secure passwords: Use a mix of uppercase and lowercase letters, numbers, and special characters. For example, “C1hristmas$h0pping!”
Avoid reusing passwords. If a website you’ve used is hacked, reusing the same password for multiple sites puts all your accounts at risk. Cyber criminals will try your credentials across numerous sites if they manage to hack one in the hopes you reuse the same password across multiple.
Utilise password managers like Nordpass, Keeper or Dashlane which generate and securely store strong passwords for you, making it easier to manage them across platforms.
Fact: 61% of people use the same password on multiple services and sites.
- Avoid Public Wi-Fi when making purchases.
Public Wi-Fi is often unsecured, making it easy for hackers to intercept your data. Avoid entering personal or payment details while connected to such networks.
If you must shop online while out and about, use a Virtual Private Network (VPN) to encrypt your data and protect your online activity. 
- Stay Alert to Phishing Scams
Be cautious of unsolicited emails or texts offering massive discounts or claiming urgent account issues. Scammers often mimic well-known brands to catch you out.
Look at the email address closely. Scammers may use addresses like “cust0merservice@amazan.co.uk” to trick you in the hopes you are not paying attention.
Instead of clicking links in emails, go directly to the retailer’s website by typing its URL into your browser. If something doesn’t feel right, it probably isn’t.
Did you know? - Holiday e-cards are more popular each year, but some may be fraudulent or have potential to deliver malware to your device.
Tip: If received from a known party, delete the e-card and do not open it. If it has come from a friend or family member, but it just doesn’t appear right – confirm with the person before you open it.
- 5. Use Secure Payment Methods and Monitor Bank Transactions
Use services like PayPal or Apple Pay, which offer an extra layer of security by acting as a middleman between your bank and the retailer. Always set up 2-factor authentication and MFA on all payment platforms, and ensure your passwords are completely different to ones you have used on other websites. 
Where possible, try and avoid direct transfers. Never pay via bank transfer unless you are 100% confident in the legitimacy of the seller. Transfers offer no protection if something goes wrong.
- 6. Keep Software and Devices Updated
Ensure your operating system, browser, and antivirus software are updated with the latest security patches. Use reputable antivirus and anti-malware tools to protect against malicious attacks. If you need further advice, then the VFast team are here to help you, contact us on 01227 668901.
- 7. Limit Sharing Personal Information
Only share what’s necessary as legitimate retailers will only ask for essential details such as your address and payment information. Be wary of sites that ask for additional personal information.
- 8. Review Delivery Policies and Website Reviews
Check return and refund policies as again legitimate retailers provide clear and fair policies. Scam sites often have vague or non-existent refund information.
Look at customer reviews like Trustpilot to gauge the reputation of an unfamiliar website.
- 9. Enable Two-Factor Authentication (2FA)
Add an extra layer of security: Many websites allow you to enable 2FA, requiring a one-time code sent to your phone or email in addition to your password.
Use authenticator apps: Apps like Google Authenticator or Microsoft Authenticator are more secure than SMS-based 2FA. 
Do you know: 55% of individuals keep passwords on their mobile phones, a practice that could lead to security breaches if these devices are lost.
- 10. Stay Wary of Fake Apps
- Download only from official sources: Use the Google Play Store or Apple App Store to avoid counterfeit apps that steal your data.
- Check reviews and permissions: Avoid apps with few reviews, bad ratings, or those that ask for excessive permissions (e.g., access to your contacts or location).
- 11. Beware of Holiday Scams
Scammers often create fake charities or fundraisers during the festive season. Verify the legitimacy of any charity through the Charity Commission website. Always do your research, do not click links and look at search engines to identify that the charity exists.
“Too good to be true” offers are always suspicious so be sceptical of unrealistic deals on high-demand items like gaming consoles or smartphones. 
Useful information: According to the statistics, about 43% of reported holiday incidents involved a social media platform, and 19% an online marketplace.
- 12. Educate Yourself on Consumer Rights
UK shoppers are entitled to certain protections under the Consumer Rights Act and online purchase rules. This includes a 14-day cancellation period for most online purchases.
Be wary of international sellers. While some overseas sellers are legitimate, returning items or disputing charges can be much more complicated.
We hope you find these tips useful and if you have any concerns, the VFast team are always here to help,