Phishing remains an effective way to lure online shoppers into handing over their personal data and financial information to cybercriminals. Well-known brands in the retail and banking sectors are most often used as bait.
One common tactic that hackers use is sending out mass amounts of fake promotional materials disguised as legitimate messages from retailers through email or social network sites. Once the user clicks on the link to view a seemingly too-good-to-be-true offer, they will be redirected to a malicious site instead of the retailer. This will put the device and financial information at risk while the malicious link will spread itself to all the user contacts to victimize them, too.
In 2021, Kaspersky products detected more than 40 million phishing attacks globally targeting e-commerce, e-shopping platforms, and banking institutions. The introduction of more e-payment systems and its popularity among customers for unmatched convenience also attracted cybercriminals that financial phishing attempts targeting e-payment systems more than doubled last year —an increase of 208%.
The ideal anatomy of an online shopping card
Online payment fraud increases by 208% ahead of Black Friday — Kaspersky
In Kaspersky’s recent study, 8 out of 10 Filipinos surveyed said they are now aware of digital payment scams.
To avoid getting scammed, you need to know what to watch out for. As you wait for the next online sale event, here are 10 ways you can do to stay safe and secure while shopping online:
- Type the URL directly into the address bar. It may take a little more effort, but this simple action can help to prevent you from visiting a fake or malicious website. Shortened URLs, often used because they are phone-friendly, can also trick you into visiting risky sites. With the new memorandum from the Bangko Sentral ng Pilipinas, clicking on malicious links would hopefully be avoided.
- Use a credit card. Your purchases will usually be insured and disputes are easier to settle when using a credit card than a debit card. Use a separate card dedicated to online shopping with a low limit. Or opt for a prepaid credit card that is not connected to your savings account. Some banks also offer virtual credit cards which generate a random account number for each purchase, preventing hackers from using the number again.
- If possible, dedicate a device and email address to online banking and shopping. By avoiding the use of the same computer for other internet activities such as browsing, social networking, emailing, and downloading, you create a “clean” computer. A dedicated email address will limit the number of spam messages you receive and reduce the risk of opening potentially malicious emails disguised as sales promos and other notifications.
- Be wary of coupon or freebies sites. Scammers use the lure of great deals to con bargain hunters. Watch out for sites that ask you to create a lengthy profile with really personal information.
- Manage and protect your online passwords. You can use a password manager to help. Some security solutions like Kaspersky Total Security include password management and password security features which would come in handy if you’re struggling with remembering passwords for all your online accounts.
- Avoid using public WiFi. Using free WiFi provided by coffee shops, hotels, restaurants, and other public areas to sign in to your private account is a security risk. Savvy hackers could hijack the WiFi signal or set up their own to trick you into using it then they can see everything you do on your device. If you need to access the Internet when shopping, it’s safer to do so via your mobile phone network. If using a public network is the only option, make sure to install a virtual private network (VPN) first so that your data will be encrypted and hackers can’t intercept it.
- Stick to familiar brands you know or have heard of. Where possible, try to buy from retailers you know, especially those with a good reputation. If you’re buying from a new vendor, research it carefully. A good test is to see if you can contact the seller — look for an email, phone number, or address plus a returns policy. A vendor’s feedback history/online reviews is another indicator of reliability and integrity.
- Always log off after shopping online. Do this especially if you share a computer with someone else.
- Use a reliable security solution. Choose one that has behavior-based anti-phishing technologies such as Kaspersky Total Security which will notify you if you’re visiting a phishing website. Having one is also a safety net as it can catch your accidental slips especially when you’re shopping last-minute and internet safety is no longer the first thing on your mind.
- Read your credit card statements. Go through them and check for unauthorized charges. Report it immediately to your bank if there is anything unusual