The holiday season is prime time for scammers!
They know you're opening your wallet to buy gifts, donate to charities and more, and they're getting sneakier about tricking you every year, especially with the increase in artificial intelligence (AI).
Don't let a cyber Grinch steal your holiday cheer this season. Here are a few new scams (including a few classics with new AI twists!) and how you can avoid them:
Delivery or Missed Package Scams
It's common to get unexpected packages during the holiday season. Scammers may send emails or texts that claim a delivery couldn’t be made, or that additional shipping/customs is required (especially with tariffs so common now). Always be sure to look at the URL or phone number given carefully. You can even put the phone number into Google to see if it's legitimate. If you still aren't sure, go directly to the carrier’s website and do not click the link provided. You can always check with your local post office, too, for advice!
Gift Card Scams
Scammers love gift cards! They have found a variety of new and innovative ways to drain gift card balances before you or your giftee even gets the card. Be sure to buy gift cards directly from the retailer, including digital gift cards, and not from a third-party website or retailer. For physical gift cards, be sure that the PIN cover (usually a scratch off) is not damaged or removed. Be wary of "free gift card with purchase" offers, too.
Charity and Non-Profit Organization Scams
The holiday spirit makes this a peak time for scammers to pose as charities or ask for donations in tricky ways. When you choose to donate, make sure the charity is legitimate (you can check on Charity Navigator) and go directly through the organization to donate, not through a third-party organization. Don't worry about urgency. A real charity will be happy to receive your donation no matter when it arrives.
Social Media Gift Exchanges
This is a new one! You may be invited via social media to join a “Secret Santa” or “Holiday Gift Swap” — you send a gift to someone, then you’re told you’ll receive multiple gifts in return — but it’s really a pyramid scheme and you may expose your personal or financial info. If a friend on social media sends you this type of solicitation, check with that friend directly to verify. A lot of people's social media profiles have been copied or duplicated to look real!
AI-Enhanced Personal Phishing Attempts
Scammers are diving into a treasure trove of personal information on the Dark Web, and they're using AI to craft personalized scams. They may know what charities you've donated to in the past, where you work, where you live and even that you have a dog named Rover. If you ever get a request for information or money that you weren't expecting, be sure to make a few phone calls or otherwise verify that it's coming from a legitimate company or organization and not from a scammer.
Travel Scams
It's the high season for travel! Whether you're driving or flying, there are a lot of scams waiting for you.
Drivers: If you cross state lines, be aware of toll roads. At some point in the past few years, you've probably gotten text messages warning you about unpaid tolls and fees — and they're usually scams. If you did drive through a state and think you might be liable for tolls you didn't pay, contact the state highway administration. If you get a text message that seems a little bit fishy, contact the state it came from and check in before sending any payment. Air travelers: If you're flying, always double check information directly with the airline, especially if you get a text message or email telling you your flight has changed or been canceled.
Fake Holiday Jobs
Especially with the ongoing furlough and job reductions across the country, you might be looking for part-time work. And some of those remote jobs look pretty good! You need to be careful applying for seasonal jobs, because a lot of them are fake and only designed to get access to your personal information. Before you sign up for a job online and turn over your personal data to get paid, contact the company directly to make sure it's not a scam! You should not have to pay for "training materials" or special software for most jobs. You should also check the website and use the contact information there — if a phone number is invalid or an email bounces back, that's usually a bad sign. You can also look up who owns a website and how old the website is through ICANN, which provides this information free.
Here are three tactics to avoid falling prey to a scam this season:
- Stop and think! Scammers rely on a sense of urgency because it clouds your thinking. Do you really need to act "right now" on that so-called opportunity? Once you stop and think, you may notice tell-tale signs of a scam, including misspelled words, a website that ends with unexpected letters, or even the use of the letters r and n put together to look like an m.
- Check it out. According to ScamSpotter.org, "Scammers often initiate outreach by impersonating people you know or organizations that you're familiar with (like your local police department). If the outreach seems suspicious, don't engage until you can verify the authenticity of the person or organization." You don't need to be embarrassed to call a charity, local nonprofit or business directly to check on an email or phone call you received. Just be sure to look up the phone number directly and don't just call the phone number that was included in your mail, email or text message because that number could go right to the scammers themselves.
- Beware of odd payment requests. Legitimate businesses and charities probably won't ask you for gift cards, cryptocurrency, wire payments and more. Stick with more traditional payment methods, including your CommonWealth One Signature VISA® card or another card that offers protections. If you are scammed, know that you are not alone! The Federal Trade Commission reported that in 2024, an average of about 7,200 people were scammed every single day.
Want to learn more about protecting yourself online?
Check out our recent Cybersecurity webinar, presented by CommonWealth One’s Chief Information Officer John Szeglin for practical tips to stay safe year-round. From password protection to recognizing phishing attempts, you’ll learn how to spot scams before they spot you.
We hope you have a happy, scam-free holiday season!
