Cybercriminals work year-round to steal personal and financial information, but they are busier than ever during the holiday season. From November through December, many people take advantage of online shopping and travel services. As these activities increase, so do the notifications and emails about special deals, package notifications, and reservation confirmations. 

Scammers know that when we’re overwhelmed and distracted, we are easier prey. Add to this equation the fact that so many Americans don’t know how to identify their tricks, and the result is a significant pay day for cybercriminals.

The Federal Bureau of Investigation’s Internet Crime Report showed a loss of $16.6 billion due to cybercrime in 2024 (Source: Industrial Cyber).

Fortunately, the more you know about these digital traps, the better you can protect yourself. The most common online scams during the holiday season involve exciting offers, tempting ads, and urgent messages by email or text. 

Exciting Offers: Holiday E-Cards, Free Vouchers, and Gift Card Prizes 

How would you feel if someone walked up to you with a $100 gift card and said, “Congratulations! This is yours.”

Because people enjoy winning things, cybercriminals will lure in victims with the offer of a gift. This tactic works because the excitement we feel distracts us from the red flags in their invitation. 

Once you’ve sent a scammer your information, or unknowingly downloaded malicious software, they can begin stealing your accounts, identity, and money.   

Tempting Ads: Holiday Deals on Social Media That Are Too Good to Be True

The Better Business Bureau reports that social media ads are a major source of non-delivery scams this holiday season. A non-delivery scam is when you pay for something online, but you never receive the item because the seller had no intention of sending it to you. For a cybercriminal, constructing a trap like this is as easy as:

• stealing a picture of a popular product;
• setting up a website to collect payment;
• creating an ad on Instagram, TikTok, or Facebook.

If you encounter an ad on social media offering deep discounts on popular, expensive, or hard-to-find products, that’s your cue to dig deeper. Try searching the website name with the word “reviews,” “legit,” or “complaints.” Your research will help you discover if that site has already been identified as a fraud. 

Urgent Messages: Travel and Package Notifications by Email and Text

When you order gifts online, or book a getaway, you’re guaranteed to get a few email confirmations, shipping updates, and reminders. You’re also likely to get notifications that are phishing attempts. 

Scammers will send fake notifications to your inbox or phone asking for your personal information to “confirm” their records. They will also claim they need your information to prevent your travel plans or package delivery from being canceled. Sometimes their messages will direct you to click a link to get important updates, redirecting you to a malicious website or download. 

Learn more from the Better Business Bureau’s 12 Scams of Christmas. Fake charities, job opportunities, and pet sales are also common scams at this time of year. 

Now that you know the digital dangers that may be lurking on social media or in your inbox, you can protect yourself from cybercriminals. This holiday season, enjoy your time with family and friends knowing that your information is safe.  

If you believe that you’ve been a target of cybercrime at your Cornell email address, or that your Cornell account has been compromised, please change your NetID password immediately and contact the IT Security Office.