With the holiday season just around the corner, Aussies are gearing up for the yearโs biggest shopping spree, out to score great deals. Over the six-week lead up to Christmas, shoppers are expected to spend more than $69.7 billion โ a significant part of it online, especially during Black Friday and Cyber Monday sales.
This yearโs Black Friday/Cyber Monday weekend is on track to break records, with Australian shoppers anticipated to spend a jaw-dropping $6.7 billion, 5.5% increase over 2023.
More Australians are shopping online now than ever before. According to Australia Postโs latest eCommerce report, 4 in 5 Australians shopped online in 2023, a 1.4% rise from the previous year. But as online shopping grows, so does the risk of scams.
โAs we head into peak shopping season, scammers are ramping up their tactics, preying on deal-seeking consumers,โ says Mark Anderson, National Security Officer at Microsoft ANZ. โWhile shoppers are becoming more aware of common scams, these tactics are evolving. New technologies like AI make it easier for scammers to operate and harder for people to detect these schemes.โ
With over 143,000 scam reports already this year, itโs more important than ever for shoppers to stay vigilant. โWe all need to stay alert during this time to avoid falling victim,โ Anderson adds.
High-tech scams to keep an eye out for this holiday season
Whether itโs through sophisticated video manipulations or enticing but deceptive online offers, scams can be incredibly convincing and easy to fall for.
Microsoftโs latest Digital Defence Report highlights some of the scams you should watch out for this holiday season, including:
- Deepfakes
With AI-driven deepfake technology, scammers can create realistic fake videos and audio that impersonate trusted individuals. They might use fake video calls or voice messages from familiar sources like friends or family members, tricking users into sharing sensitive information or making unauthorised payments.
To protect yourself, always verify unusual requests by contacting the person directly, and be cautious with links and attachments from unknown sources. Look for signs of manipulation, like unnatural movements in videos, and consider using multi-factor authentication for added security.
- Techscams
Techscams often involve fake tech support pop-ups or calls that appear after visiting certain shopping sites or clicking on ads, impersonating companies like Microsoft or Apple. They convince shoppers to share sensitive information or pay for fake services to “fix” non-existent issues.
Other techscams create fake shopping deals or impersonate well-known retailers, luring shoppers to fraudulent sites where they unknowingly enter payment details or make purchases that never arrive.
Microsoftโs report highlights that techscams have led to significant financial losses globally. In fact, techscams can impact wallets up to ten times more than traditional phishing attempts, making it crucial for holiday shoppers to stay vigilant and double-check the legitimacy of offers and websites.
- QR code phishing
While QR codes are a convenient way to share and access information, they can also lead you to fake websites designed to steal personal information. These sites can direct you to a fake sign-in page where you could unknowingly enter your credentials, potentially bypassing security measures like multi-factor authentication.
To avoid these, be cautious with QR codes from unknown sources and always verify requests for personal information.
Top tips to stay safe this peak shopping season
Mark Anderson, National Security Officer, Microsoft ANZ shares tips to stay safe
- Avoid clicking links or attachments
During the holiday season, scammers capitalise on our search for good deals. If an email or text offers deep discounts, tight timeframes to take an offer up, or unusual availability for an item that is sold out everywhere else, it could be a scam. Play it safe: donโt click on links or open attachments in SMS or email. Instead, go to the retailer’s website directly and see if the offer checks out.
2. Be sceptical, even with familiar contactsย
Phishing messages are more convincing and harder to identify than ever. Be cautious with unexpected texts from friends or family members asking for money. Or an email from your bank asking for your personal details. Always apply additional scrutiny and double check directly with the sender before doing what they requested, opening or downloading an attachment, or replying back to their message.ย Fake invoices are another common trick used to prompt unauthorised payments or downloads.
3. Use unique passwords and multi-factor authenticationย
Consider using a password manager to help store your strong, unique passwords securely for each site. Also, enable multi-factor authentication wherever possible. I canโt stress enough how this simple step can be what will save you from a scam. This adds a second layer of security, which Microsoft reports can block 99% of password-based attacks.ย However, be wary of unexpected multi-factor authentication alerts, as these could indicate an attempt to breach your account.
4.Report suspected scams to authorities
If you think youโve been scammed, act quickly. Contact ID Support NSW on 1800 001 040 or visit https://www.nsw.gov.au/id-support-nsw. The Australian Cyber Security Centre (ACSC) also provides assistance through their 24/7 hotline at 1300 CYBER1 (1300 292 371) or by reporting online at https://www.cyber.gov.au/report-and-recover/report.
