Hacker/ShutterStock
Caution, the shopping holidays (and scams) are here: During the month of November (into December), the days of online shopping: Shopping IL, Black Friday and Cyber Monday, in a slightly different format, mainly in support of local businesses and the configuration of the country, were launched. Unfortunately, all of this time can be accompanied by phishing attacks with one goal – to steal as much money from you as possible. "It's important to remember that in any era, whether war or not, cybercriminals always use the momentum to steal information or money. Therefore, it is more important than ever to take precautions when shopping online," says information security company ESET.
A significant part of all purchases in November will be made from a smartphone, so safe mobile purchase rules are also important. According to a 2023 DataReportal study, 50.9% of online shoppers worldwide use their mobile phones to purchase products online at least once a week. This trend is particularly pronounced among internet users aged 35-44, with 56.8% of women and 52.4% of men in this age group reporting mobile purchases at least once a week.
The scam is in the details
"It is important to remember, there are those who wait just like you for the shopping frenzy, and these are the attackers who know how to take advantage of the surging online purchase traffic to spread malware and gain access to people's personal information and cause damage to them," says information security company ESET. "November's shopping month is a particularly fertile ground for fraud."
"In 2023, 50.9% of global online shoppers are using their mobile phones."
Here's how to protect yourself from scams
- Start by buying from well-known sites - purchasing from well-known sites will usually be safer than a site you do not know and offers a product for hundreds of shekels at half price. A purchase from a site you don't know that may be malicious can result in a significant financial loss and access to your credit card.
- Don't click on unfamiliar links – in many cases you'll encounter links that offer great deals and coupons. This can also be a problem in normal times, but during the shopping month it is important to be alert to scams that try to take advantage of this time of year. These fraudulent attempts can reach you via email, social media, WhatsApp and even ads on Google and Facebook.
- Beware of advertisements for crazy discounts on social networks - if you reached the desired product by clicking on a link from a social network, such as Facebook or Instagram and even Google, always check separately on the official website of the advertising company that the promotion or deal really exists. Studies show that ads on Facebook can also cause us to download malware onto our devices.
- Beware of phishing attempts and email scams – tempting offers that reach you by email and direct you to unfamiliar websites may be attempts to extract your personal information, credit card details and cause you damage. If you receive an email about a deal you owe, it is advisable to enter the site independently and even then check that it is safe and reliable (next tip)
- Make sure the website you're purchasing on is secure – check if the URL starts with Https:// as most shopping sites encrypt your traffic. In addition, on secure sites there is a green padlock sign on the left side of the address (right if the browser is in Hebrew). Note that the lock mark appears in the URL bar and not on the website itself, which may indicate a fictitious website. A secure website will protect your data and reduce the risk of data loss.
- Use two-factor authentication—if it's offered on the website you're purchasing—with double authentication (also called two-factor authentication) even if your password somehow leaked out, without the second step, you won't be able to do anything with it.
- Make sure your operating system is up to date with the latest security fixes. Up-to-date software often contains important security updates that keep your computer safe.
- Make sure that the WiFi network you're connected to is secure and that you know who has access to your home network. We recommend that you do not use public WiFi when making online purchases, even if it is password protected. Purchasing from a computer or smartphone connected to unsecured public networks allows the information to be intercepted by attackers connected to that network, thereby stealing and using your payment information.
- All the passwords you use should be complex, hard to guess or even better, hard to guess, but easy to remember. It's also important not to "recycle" passwords for multiple sites and services. If hackers have obtained your login details including your username and password, they will usually also try to use that information to access other services you use. A strong password is one that consists of numbers, lowercase letters, uppercase letters, and special characters.
- Pay with PayPal, Apple Pay, Google Pay or credit card. Credit card companies provide buyers with protection if something goes wrong during the purchase. Avoid payments by bank transfer. If you buy a lot online, you can consider designating one credit card. In case something happens, you can easily cancel it without affecting any additional ongoing transactions.
- Set alerts through the credit card company - this way you can receive an SMS or email about every purchase made with your credit card. Set notifications to start at a low amount for each purchase. Also, set alerts for total purchases over a certain amount to protect multiple purchases of low amounts. You can also set notifications only for overseas purchases. In general, check your charges regularly. It can only help.
- Be careful and try to avoid apps that ask for suspicious permissions, such as access to contacts, text messages, administrative permissions, passwords, or credit card information.
- Only download apps from official app stores like Google Play or Apple Store. Official stores carry out testing processes to make sure they don't have malicious apps.
"Start by buying from reputable websites." Caution! Scam/ShutterStock
How do you ensure a safe purchase on your smartphone or tablet?
- Only download apps from official app stores like Google Play or Apple Store. Official stores carry out testing processes to make sure they don't have malicious apps.
- Check the details of the app before downloading. Pay attention to the developers and spelling of brand names.
- Be careful and try to avoid apps that ask for suspicious permissions, such as access to contacts, text messages, administrative permissions, passwords, or credit card information.
- Avoid purchasing when connected to public Wi-Fi – public Wi-Fi networks aren't encrypted, which means anyone can view your information, even information entered like a credit card). Your information is vulnerable when you are outside a secure network.
- Turn off Bluetooth if you're shopping while you're out. Hackers can see the networks you've connected to, create fake versions of them, and trick you into connecting to them, giving them access to personal data like passwords or credit cards.
- Keep your apps and operating system up to date – attackers can exploit bugs or vulnerabilities if the app is out of date. Pay attention to messages asking you to update and be aware of apps that store your personal information.
- Let's face it, the chances of finding the bag or perfume you want, which usually costs 1000 NIS, at a bargain price of 100 NIS just because of the shopping holidays, is extremely low. Even if it does exist, it's better not to take a risk, chances are, either it's a fake product or a scam, for example one that you pay and don't get anything.
- More on the subject:
- Shopping
- November
