How to Avoid Getting More Than You Bargained For When Shopping Online
Updated September 2024 — With over 2.7 billion people around the world expected to shop online in 2024, shopping online has become second nature for many of us. Although the convenience and variety are unmatched, the rise in e-commerce has also attracted an increase in cybercrime, leaving consumers vulnerable to identity theft, fraudulent websites, and payment scams.
As more people opt for the ease of buying from their devices, cybersecurity concerns grow. According to recent reports, cyberattacks on e-commerce platforms are steadily climbing, creating an urgent need for increased awareness and protection. With hackers constantly evolving their techniques, it’s essential to stay one step ahead by recognizing common online threats before they compromise your safety.
That’s why the Global Cyber Alliance has decided to share actionable tips and strategies for how to stay safe shopping online. From recognizing phishing scams to ensuring your payment information is secure, you’ll learn what to watch out for and how to better protect yourself while enjoying online shopping.
Is it Possible to Be 100% Safe When Shopping Online?
While online shopping offers convenience, it’s important to recognize that no system is completely foolproof. The reality is that being 100% safe when shopping online is impossible. Cybercriminals are continually finding new ways to exploit vulnerabilities, and even the most secure websites can be targeted. There are, however, best practices to make your online shopping experience much safer.
By following good security practices, you can significantly reduce your exposure to potential threats. Using strong, unique passwords, enabling multi-factor authentication, and shopping on reputable websites with secure payment methods are just a few steps that can minimize your risk. It’s also wise to regularly monitor your accounts for suspicious activity and ensure your devices are updated with the latest security patches.
The key to staying safe online is finding the right balance between convenience and security. While it might seem easier to reuse passwords or save payment information for future purchases, these shortcuts can — in many cases — open the door to cyber threats. Being proactive with your security measures may require a little extra effort, but it will protect your sensitive information and give you peace of mind during your online shopping experience.
Am I More Likely To Be Scammed Online During The Holidays?
In short — Yes. You are more likely to encounter scams during the holiday shopping season. It should be noted that this doesn’t mean that you’re necessarily safer shopping online during non-holiday seasons, just that malicious actors typically increase their attempts and number of targets during times that more people are shopping online. Simply put, as e-commerce activity surges around the holidays, so do online scams.
According to a 2023 report, 80% of consumers in the U.S. have experienced or been targeted by at least one form of online fraud during holiday shopping seasons. Cybercriminals take advantage of the rush, knowing that consumers are more likely to overlook suspicious activity while hunting for the best deals.
Holiday-related scams are diverse and are becoming increasingly sophisticated. Fake websites that mimic legitimate retailers can trick shoppers into entering payment details or personal information, only for their money to disappear. Phishing emails offering “exclusive” discounts often contain malicious links that, once clicked, can compromise your devices. Then, there are the all-too-familiar “too good to be true” deals, which lure shoppers with steep discounts on high-demand products, only for the goods to never arrive.
To stay safe during the holiday season, be cautious of unfamiliar websites, avoid clicking on email links from unknown senders, and always verify the legitimacy of deals before making a purchase. By staying vigilant, you can protect yourself from holiday scams and still enjoy stress-free online shopping.
How Do I Know if My Online Payment is Secure?
One of the most important steps in ensuring your payment is secure when shopping online is to verify that the website uses SSL/TLS encryption. This technology protects the information you send, like your payment details, from being intercepted by cybercriminals. To check if a website is secure, look for “HTTPS” at the beginning of the URL and a padlock or tuner symbol in the address bar. If you see these indicators, the site is encrypting your data and providing an added layer of security.
Using secure payment methods is another crucial aspect of staying safe online. Credit cards and trusted payment processors offer protections that are not available with other forms of payment. Most credit card companies provide fraud detection and allow for chargebacks if something goes wrong with your purchase. Payment platforms like PayPal also offer buyer protection, adding peace of mind.
On the other hand, it’s always wise to avoid direct bank transfers or using debit cards for online shopping. These methods offer limited recourse if you fall victim to fraud, as your money is instantly withdrawn directly from your bank account with fewer protections. Here’s an excellent Reddit thread discussing why debit cards should be avoided when making online purchases. Sticking to credit cards or established payment processing platforms is a smart way to keep your financial information secure while shopping online.
Should I Use a VPN When Shopping Online?
Virtual Private Networks or VPNs are becoming much more common in the consumer world. A VPN is a tool that helps secure your internet connection by encrypting the data you send and receive online. When you connect to a VPN, it creates a secure “tunnel” between your device and the website or service you’re using, making it much harder for hackers or other third parties to intercept your personal information. This can be particularly useful when shopping online, as it adds an extra layer of protection for your transactions, especially if you’re in a situation where you have no option but to use a public Wi-Fi network to make a purchase.
One of the main benefits of using a VPN is that it encrypts your entire connection, which can be crucial when shopping on unfamiliar networks, such as at coffee shops or airports. Public Wi-Fi is notoriously vulnerable to cyberattacks, and a VPN can help protect your sensitive data, like credit card numbers and login credentials, from being stolen.
Although a VPN is a valuable tool, it’s not a cure-all for online shopping safety — remember, there’s no such thing as being 100% secure. VPNs cannot protect you from scams, phishing emails, or insecure websites. Even with a VPN, it’s essential to check that the website you’re shopping on uses SSL/TLS encryption (look for “HTTPS” and the padlock or tuner symbol that we discussed above) and to follow other good security practices. A VPN adds security to your connection, but it won’t shield you from malicious websites or fraudulent transactions.
What Are the Most Common Online Shopping Scams?
Scammers are constantly finding new ways to trick unsuspecting online shoppers. Some of the most common online shopping scams target both your money and personal information, so it’s important to know what to watch for and stay vigilant.
One major scam involves fake websites that are designed to look like legitimate retailers. These sites may offer popular items at unbelievable prices, but once you place an order, either counterfeit products arrive or nothing shows up at all. Always verify the legitimacy of a website by checking for “HTTPS” in the URL, reading third-party reviews, and avoiding deals that seem too good to be true.
Another common threat comes from phishing emails that appear to be from reputable retailers. These emails often contain links to fake login pages or malicious sites designed to steal your personal or financial information. Before clicking any links, examine the sender’s email address and the content of the message for inconsistencies, and visit the retailer’s official site directly instead of clicking a link in the email if you’re unsure.
Finally, non-delivery and non-payment frauds are frequent during high-demand shopping periods. In non-delivery scams, a shopper makes a purchase but never receives the item, while in non-payment fraud, sellers ship goods but never get paid. To protect yourself, use secure payment methods that offer buyer protection, such as credit cards or trusted payment platforms.
Is It Safe to Use Public Wifi to Shop Online?
Shopping online while connected to public Wi-Fi can pose significant risks and should be avoided unless absolutely necessary. Public wifi networks, such as those in coffee shops, libraries, airports, or hotels, are often unsecured — making them prime targets for cybercriminals. One of the biggest threats in using public networks is the risk of data interception, where hackers can capture the information you send over the network, including your payment details and personal information. Another similar method used by malicious actors on public Wi-Fi is called a man-in-the-middle attack (MITM), where a hacker intercepts communication between your device and the website you’re using, potentially altering or stealing your data.
If you have no option but to shop online while connected to public Wi-Fi, there are ways to minimize the risks. One of the most effective methods is using the aforementioned tool, a VPN, which encrypts your internet connection and helps protect your data from prying eyes.
For maximum safety, the best alternative is to use your mobile data, if available, or shop while connected to a secured private Wi-Fi network at home or in another trusted environment. These options provide much stronger protection and reduce the likelihood of your information being compromised during an online shopping session. By being cautious about the networks you use, you can better protect yourself from cyber threats while shopping online.
Is It Safe to Save My Payment Information on Websites?
Saving your payment information on websites for future purchases can be convenient, but it’s important to weigh the risks and benefits before deciding if it’s worth the time saved from manually entering your payment details.
One of the primary benefits is the obvious convenience factor. Storing your payment details allows for faster checkouts, especially if you frequently shop on the same site. However, this convenience comes with significant risks. Data breaches have become commonplace in recent years, with reports indicating more than 3200 occurring in the U.S. during 2023. To put this into perspective, the number of reported U.S. data breaches in 2012 was only 447. If the website you’ve saved your payment information on is compromised, your financial details could be exposed. In addition to data breaches, account takeovers are another growing threat. If a hacker gains access to your account, they could make unauthorized purchases using your saved payment information.
A safer alternative is to use trusted payment wallets or services like Apple Wallet or Google Wallet, which use tokenization — essentially, a form of encryption — to secure your information. These platforms replace your card details with a unique, encrypted code for each transaction, meaning your actual card number is never shared with the retailer. This added layer of security makes it much harder for cybercriminals to access your financial information, even if the retailer experiences a data breach.
While saving your payment information might make online shopping easier, opting for a more secure method like a digital wallet can offer stronger protection for your financial data.
Online Shopping Tips From The Cybersecurity Experts + Free Tools
Global Cyber Alliance experts discussed key tips for both individuals and organizations who either buy or sell on the internet — so, let’s face it, there is advice here that applies to all of us. Here’s a summary of the most frequently touted tips:
Online Shoppers:
- Access websites by typing the name into the browser, instead of clicking on links in emails — if the deal is that good, it will be featured prominently on the official website.
- Be skeptical of ‘too good to be true deals’ or products that are proving difficult to find elsewhere.
- Carefully check the website (domain) name and be wary of ‘lookalike’ names. For example, an r and n together (rn) can look very similar to “m” when you’re rushing to secure that deal.
- Using credit cards to make purchases online often provides additional protection against fraud — avoid direct bank transfers, debit cards, and advance payments.
- Report any suspicious activity immediately to your bank and the appropriate authority where you live — your payment details may be cloned and used to withdraw money or buy goods elsewhere.
- Never use public Wi-Fi when making a purchase online (if you have no choice, access the website via a VPN) and make sure you have antivirus and DNS protections in place.
- Check that the seller has a physical address listed, contact details, terms and conditions, and a return policy.
- Check seller reviews across different platforms, check the age of the website and that it uses SSL (https:// and the padlock or tuner icon — the “s” stands for secure but this still does not guarantee the seller is good).
- Type the company/website name and “scam” or “fake” into a search engine to see what comes back.
- Contact the seller via telephone, ask to see a video, or meet in person in a public location if buying from auction sites.
- Slow it down — there is no need to rush into anything, and if you’re not sure don’t do it — trust your instincts.
Online Sellers:
- Ensure your website and systems are up to date with the latest patches — use a well-known and trusted platform if you do not have in-house IT skills.
- Use a firewall and security software, monitor logs, conduct penetration tests, and regular security scans.
- Use encryption for secure communication (SSL certification).
- Limit access to customer data by third parties.
- If you think a fraudster may be impersonating your website, take screenshots and report it to the relevant authorities.
We’ve also uploaded a full transcript of this informative chat session.
Free Tools and Services to Help You Stay Safe When Shopping Online
Just as cyber criminals have a large set of tools at their disposal, so do you as a privacy-centric shopper or seller. If you aren’t already using the trusted platforms listed below:
- CyberFlex – Powered by the Global Cyber Alliance and sponsored by Amazon, CyberFlex provides a safe space to explore, learn, and share experiences around cybersecurity and online scams. CyberFlex is particularly aimed at Gen Z young adults (ages 18-25) and contains targeted information including free tools, interactive guides, and text alerts to prevent, mitigate, report, and recover from scams and other cyber risks.
- Global Cyber Alliance Toolkits – Offer an impressively large collection of free tools and resources for individuals, businesses, and IT professionals to strengthen their cybersecurity. GCA’s Toolkits are often lauded for their easy to follow, step-by-step guides that help users protect against online threats, manage vulnerabilities, and enhance digital security practices.
- Quad9 – Quad9 is a free, public DNS security service that protects users from malicious websites by blocking access to known threats. It enhances internet safety by helping filter out harmful domains and provides privacy by not storing users’ personal data.
- Take9 – This campaign encourages people to pause and take nine seconds to think before you click, download, or share.
- APWG – A global coalition focused on combating cybercrime, specifically phishing attacks and related online threats. It provides resources, research, and collaboration opportunities for individuals, businesses, and governments to prevent and respond to phishing and other forms of cyber fraud.
- Europol’s Public Awareness & Prevention Guides – Europol provides resources and advice to help individuals and businesses protect themselves from various types of crime, including cybercrime and fraud. These free guides aim to raise awareness, educate the public, and offer practical tips to prevent becoming victims of criminal activity.
- Cyber Readiness Institute – This organization empowers small and medium-sized businesses to improve their cybersecurity practices through free resources, tools, and training.
- Cybercrime Support Network – This resource hub provides practical guidance for individuals, families, and small businesses to defend against cybercrime. It offers step-by-step instructions for preventing, identifying, and recovering from various online threats, such as identity theft, fraud, and ransomware attacks.
- Get Safe Online – A UK-based organization that provides free, expert advice to individuals and businesses on staying safe and secure online. It covers a wide range of topics, including online shopping, privacy, fraud prevention, and cybersecurity best practices.
- Secure Our World – The US’s Cybersecurity & Infrastructure Security Agency (CISA) provides information on four easy ways to stay safe online and offers resources in multiple languages.
The Takeaway | How to Stay Safe Shopping Online
Staying safe while shopping online is more critical than ever as cybercriminals continue targeting unsuspecting shoppers. Although no method can guarantee complete protection, following best practices like using secure websites, trusted payment methods, and VPNs can significantly reduce your risks. By remaining cautious, regularly updating your security habits, and using available resources, you can protect yourself from online threats and enjoy a safer shopping experience. With the right knowledge and tools, navigating the world of online shopping becomes a lot more secure.
For news and updates on the latest cybersecurity threats, trends, and developments, be sure to check the GCA’s news section regularly.
