The Cybersecurity & Infrastructure Security Agency (cisa.gov) offers a series of short video tutorials on safe Holiday Online Shopping.  This information is useful throughout the year.

Before you start shopping:

  • Make sure your computer, browsers, and Endpoint Protection (Anti-virus) are up to date.
  • Check if your credit card company offers virtual credit cards for online purchases. This creates a temporary credit card number that can only be used at that online store. Likewise, if possible use only 1 credit card for all purchases to minimize exposure. 
  • Review what you plan to purchase and their prices. Don’t pay more by mistake.
  • If buying on the go, avoid using public Wi-Fi and scanning QR codes.

While shopping:

  • Protect each online account with a unique, complex password – consider a password keeper
    Use multifactor authentication (MFA) with accounts for stores that offer it.
  • Avoid fake online stores by typing the URL into the address bar instead of searching for it.
    Check the URL for misspellings and make sure they begin with HTTPS: and have the lock symbol to the left.
  • Check emailed ads for legitimate email addresses and URL links.
  • Checkout using a credit card for fraud protection. Avoid using debit cards or services like Paypal and Venmo if they are linked to debit cards.

 

Awaiting your order:

  • Be on the lookout for phishing emails and smishing (SMS and phishing) text messages.
    • Common phishing and smishing attacks include “Your account has been compromised, click to verify your account.” or “Your package could not be delivered. Visit this link to reschedule.”
    • Do not respond directly to the message.
      • If you are unsure, call the organization directly using a verified number not the one provided in the email or text message.

Once everything has arrived:

  • Review bank and credit card statements for any unknown charges.
  • Confirm all orders have been delivered.
Tagged in: