Some of the biggest cyber security threats that Australian shoppers face get triggered during online shoppoing events!

Highlights:

• Online shopping events like Black Friday and Cyber Monday present increased cyber security threats for Australian shoppers.
• Common threats include phishing scams, fake websites, malware, identity theft, social engineering and coupon scams.
• Protect yourself by avoiding suspicious links, using strong passwords, and questioning whether shopping deals are too good to be true.

6 cyber security threats to watch out for when shopping online

Online sales like Black Friday and Cyber Monday are a great way to snag a shopping bargain in the lead up to Christmas, but they also come with significant cyber security risks. Cybercriminals are targeting these popular online shopping events, using a variety of techniques to scam and defraud Australian shoppers. The rise of artificial intelligence will continue to further increase the volume and sophistication of these schemes.

To protect your personal and financial information, we’ve outlined six common online shopping threats to watch out for - along with tips to help you stay cyber safe.

1. Phishing scams targeting online shoppers

If you receive a message from a retail brand in your email, via text message or on social media, don’t assume it’s from a legitimate online seller. These fraudulent messages, known as phishing scams, often accompany major shopping events, as scammers attempt to trick you into clicking on fake special offers or parcel delivery notifications. These links can install harmful malware on your device, giving scammers access to personal or financial information.

How to protect yourself

• Always verify the sender’s email address, and check for unusual spelling or grammatical errors.
• Avoid clicking links in unsolicited messages, even if they look genuine. Instead, navigate directly to the retailer’s official website.
• Enable two-factor authentication on your accounts for added security.
   

2. Fake shopping websites 

Scammers prey on online shoppers hunting for deals by creating fake websites that mimic online stores, often replicating well-known brands. They use stolen logos, fake reviews, and may even pay to have their websites appear higher on search results.

These sites may sell counterfeit products, steal your payment information, or simply take your money without delivering anything. Many of these fake sites appear just before big sale events and disappear afterward, making it difficult to report fraud or obtain refunds.

How to protect yourself

• Stick to reputable retailers you know or research any new online store before making a purchase.
• Look for ‘https’ in the website url and a closed padlock icon, which indicate the site uses encryption to protect your data.
• Memorise the web addresses of your favourite retailers so you don’t accidentally click on a fake site.
• If a deal seems too good to be true, it probably is.
   

3. Malware through discounted apps and browser extensions

Cybercriminals often disguise malicious software as legitimate apps or browser extensions, promising exclusive discounts to entice you. Once installed, this malware can capture your personal information, track your online activity, and even gain access to sensitive data like saved passwords and credit card details.

How to protect yourself

• Only download apps from reputable app stores.
• Avoid downloading unnecessary browser extensions, especially those promising deals or discounts.
• Keep your devices updated with the latest security patches.
   

4. Identity theft via data breaches

Online shopping requires you to enter personal information, from email addresses to payment details. Hackers can exploit data breaches to access this information and commit identity theft, using your stolen details for fraudulent activities like making unauthorised purchases or opening new accounts in your name. 

How to protect yourself

• Use strong, unique password phrases for each online shopping account. Consider using a password manager to securely store them.
• Opt for secure payment methods such as PayPal, Apple Pay, Google Pay or credit cards
• Use a credit card instead of a debit card for online purchases, as credit cards generally offer better buyer protection against fraudulent card use. Consider using a dedicated credit card with a low limit for online shopping
• Monitor your financial statements regularly for any suspicious activity, especially after online shopping purchases.
• Be wary of using public Wi-Fi for online shopping as hackers can more easily intercept communication between your device and a website. If you must use public Wi-Fi, consider using a virtual private network (VPN) for added security.
   

5. Social engineering scams on social media and fake reviews

Social engineering scams are a psychological form of cyberattack, often taking place on social media or through fake reviews. Scammers may pose as customer service representatives, promising refunds or discounts in exchange for your personal information. They may also post fake reviews to lure you into purchasing from illegitimate sites or downloading malicious apps.
 

How to protect yourself

• Be sceptical of unsolicited messages from customer service representatives on social media. Legitimate companies rarely contact customers this way.
• Cross-check reviews across different sites to verify their authenticity.
• Avoid sharing personal information on social media or through unverified customer service channels.
   

6. Coupon code scams

Coupon codes are a popular way to save money when shopping online, but scammers often create fake coupon codes or websites that promise unrealistic discounts. These fake sites may collect your personal information like your email address, which can then be used for identity theft or sold on the dark web.
 

How to protect yourself

• Only use coupon codes from trusted websites or directly from retailers.
• Avoid sites that ask for excessive personal information to access a coupon or promise deals that seem too good to be true.
• Check that coupon code sites have clear privacy policies and legitimate customer reviews.

   

Take action on suspicious cyber security threats

By following the precautions outlined above, you can reduce your risk of falling victim to the growing number of cyber security threats targeting online shoppers. However, if you suspect you’ve been targeted, report it to IDCARE and contact your bank or lender to block your accounts. 

Regularly reviewing your credit report can help you detect any unusual activity early on. Remember, as a victim of cybercrime, including identity theft, your credit score could be negatively impacted if fraudsters misuse your information.

Credit and identity protection services can monitor your credit file for suspicious activity and scan the dark web for your personal information. This proactive approach can give you the chance to take immediate action, such as changing passwords or freezing your credit file.

Subscribe to an Equifax credit and identity protection plan to receive dark web and social media monitoring powered by Norton™, along with credit alerts whenever your credit file is accessed.

Disclaimer: The information contained in this article is general in nature and does not take into account your personal objectives, financial situation or needs. Therefore, you should consider whether the information is appropriate to your circumstance before acting on it, and where appropriate, seek professional advice from a finance professional such as an adviser.