The report
Experts at the global cyber security and resilience firm NCC Group are warning shoppers to be on high alert for an increased risk of online scams over the next few months.
Cybercriminals take advantage of consumers looking for deals during the festive period to scam them and exploit security vulnerabilities. In a new report, NCC Group outlines the key risks for consumers.
The report, entitled Shop smart this season - avoid scams, protect your tech, provides practical steps for consumers to take and highlights the growing threat posed by connected devices.
“The festive period notoriously exposes shoppers to scams, creating the perfect environment for cybercriminals. They thrive on the panic and urgency that big sales generate, counting on people to act before they think. Being vigilant is crucial. If something feels off, or feels ‘too good to be true’, it probably is. A cautious mindset is your best defence - especially during high-traffic shopping events when online threats are at their peak.”
- Andy Davis, Global Research Director, NCC Group
Read online
Authors
Daniel Romero
Executive Principal Security Consultant
Minali Arora
Principal Security Consultant
Silvana van Nunen
Associate Security Consultant
Top tips for secure shopping in 2025
Watch out for deepfake ads: Before buying any devices this festive season, make sure that you’re shopping on reputable platforms. Social media scams have become increasingly convincing, with deepfake videos luring consumers to fake websites - something 60% of shoppers say they’ve encountered online.
Keep a checklist when buying tech: Double-check website addresses for spelling errors. Avoid clicking on unfamiliar or suspicious links, and always verify seller profiles, photos, and reviews.
Treat overseas shopping apps with caution: While offers can be tempting, products sold on lesser-known international platforms may not meet UK safety standards. Some have also been found with hidden hardware or unverified software that could compromise your data.
Beware of payment scams: Once you’ve chosen a product, there are still risks at checkout. Be wary of communications that give a lack of professionalism or requests for direct bank transfers. Stick to trusted payment platforms, use strong passwords, and turn on two-factor authentication wherever possible to keep your data secure.
Know the red flags: Scammers rely on urgency and panic. Question any message that demands quick action or advertises an unbelievable deal. Another common scam during this period is fake charity requests, which use emotional appeals to trick people into giving away money or information.
Act fast if something feels off: With smart devices, think before connecting them to Wi-Fi to avoid letting attackers into other devices on your network. If you suspect anything, take action immediately. If you’ve made a purchase using a credit card, trusted payment system, or your bank, contact your provider immediately to block the payment and freeze your account if needed. Change any affected passwords straight away, using strong and unique combinations to prevent cybercriminals from accessing your accounts. If you clicked on a suspicious link, downloaded an unknown attachment, or entered details on a fake website, your device may be infected with malware. Run a full antivirus or security scan using your device’s built-in tools or trusted software to detect and remove any threats.
Learn how to spot scams and stay secure online this holiday season.
Online security is a gift that keeps on giving - over the festive period and beyond. Cyber security experts at NCC Group are passing on their knowledge and best-practice advice to help you avoid the most relevant retail risks this year.
For press enquiries, please contact press@nccgroup.com