The 12 scams of Christmas

What scams and schemes do you need to watch out for during the holiday season?

Topic: Security
1 of 13 Charlie Osborne/ZDNet

The 12 scams of Christmas

This year, cybercrime has evolved to new and more sophisticated levels — far beyond the days of phishing emails by "lawyers" who need to transfer millions of dollars to your account on behalf of a long-lost African uncle. So, what do you need to keep an eye out for as Christmas approaches?

2 of 13 Charlie Osborne/ZDNet

You've got mail

Security firm McAfee releases its annual "12 Scams of the Holidays" list as the holiday season approaches. To begin, while phishing emails are a year-round nuisance, as the holiday season approaches, consumers may be more likely to click on legitimate-looking emails promising deals, discounts and sales. In addition, shipping notifications from trusted sources such as FedEx are often replicated by cybercriminals and malicious links created to look legitimate. Keep tabs on your deliveries, check the website address and go to the legitimate website through a browser rather than email if you need to track a shipment.

3 of 13 Charlie Osborne/ZDNet

It's free, honest

There's no such thing as a free lunch, and the likelihood of an e-commerce website being able to offer you Christian Louboutin shoes for 95 percent off or a Boss suit for a few bucks is highly unlikely. When you're looking for this year's most coveted products, keep your eyes peeled and be wary of phoney competitions on social media, dodgy-looking links sent through an email and bogus gift cards.

4 of 13 Charlie Osborne/ZDNet

Fake charity cheer

Christmas is the time of giving, and many consumers will use the season to donate to their favorite charity. However, it is also prime time for cybercriminals to trick you into donating — to a fund outside of your chosen charity. Be wary of fake charities or pleas for help shared through emails and social media — especially if some kind of disaster is covered by the media. It is emotionally charged events and the season that cybercriminals will use to lure you in.

5 of 13 Charlie Osborne/ZDNet

Point of sale malware, and the sad reality

Sadly, there are some kinds of cybercrime you cannot protect yourself against. Point-of-sale (POS) malware, which hits retailers at the till, can lead to exposed credit card information. In these scenarios, the only thing you can do is keep an eye on your credit card statements and stay on top of security news.

Image via CNET

6 of 13 Charlie Osborne/ZDNet

iScam, thanks for the data

Apps, a crucial element of mobile technology, have exploded in popularity as more and more consumers adopt smartphones and tablets. However, as consumers became more interested, so have cybercriminals — and malicious apps are more frequently being used to steal data. Check out reviews first before downloading new apps, and take note of what permissions the app asks for.

7 of 13 Charlie Osborne/ZDNet

Season's Greetings, Merry Malware

Digital e-cards are flung across the web during Christmas, and while well-known e-card websites are fine, be wary of unknown senders or cards that ask you to download software.

8 of 13 Charlie Osborne/ZDNet

Travel deals too good to be true

Travel is often at a premium price when the holidays come around — and cybercriminals will take advantage of this by promoting fake travel deals across email, social networks and legitimate-appearing websites. Not only will some websites simply take your money, but clicking on malicious links may install spyware. It is also worth noting that free, public Wi-Fi networks available when you reach your destination are not secure by nature, and you need to make sure your PC is up to date and you ignore any prompts to download software you did not want or recognize.

9 of 13 Charlie Osborne/ZDNet

Bank robocalls, IT help

Fake phone calls, which often take the guise of IT technicians (I'm from Microsoft and we've scanned your computer, you are infected, we need money to clean it up), can dupe the less tech-savvy among us. In addition, automated "security agents" state that a user account has been compromised and personal information will be requested — including a password — to unlock an account. These are fake and must be ignored, as no business will ask for such details on the phone.

10 of 13 ATM Keypad 2 image by William Grootonk, CC BY-SA 2.0

ATM skimming

ATM skimming — the practice of installing devices on cash machines that read the data on a card's magnetic strip — increases in frequency as Christmas comes calling. Either a camera or keypad overlay is often used to skim cards, so use your hand to cover which numbers you punch in and look carefully at the ATM before use.

11 of 13 Charlie Osborne/ZDNet

Year in review

Many news services send out "Year in review" features during the holiday season. However, some cybercriminals are known to target business email lists with industry-specific types that, unmasked, are phishing campaigns that could lead to malicious websites.

12 of 13 Charlie Osborne | ZDNet

Bring your own... device

Christmas is here and the parties begin. Unsurprisingly, this is one time of the year when you'll hear at least one person bemoaning the loss of their smartphone while enjoying the bubbly. If you do, use a phone-tracking service such as Find my Phone on Android or Find my iPhone for Apple devices, and immediately change the passwords to any accounts connected to your mobile.

13 of 13 Charlie Osborne/ZDNet

The risk of USB freebies

During the holiday season, you may see an increase in gift baskets from vendors who want to continue doing business with your company. One popular gift is branded USBs — but be aware that pre-installed malware may come installed on them.

Related Galleries

Yubikey Security Key C NFC
Security Key C NFC

Related Galleries

Yubikey Security Key C NFC

First look at the YubiKey Bio
YubiKey Bio

Related Galleries

First look at the YubiKey Bio

iVerify (version 17)
iVerify for iOS and iPadOS

Related Galleries

iVerify (version 17)

OnlyKey hardware security key

Related Galleries

OnlyKey hardware security key

SoloKeys Solo V2
Solo V2

Related Galleries

SoloKeys Solo V2

iVerify: Added security for iPhone and iPad users

Related Galleries

iVerify: Added security for iPhone and iPad users

iStorage datAshur BT hardware encrypted flash drive
iStorage datAshur BT

Related Galleries

iStorage datAshur BT hardware encrypted flash drive