Holiday Shopping Scams: 7 Types to Watch This Season
Scammers are getting an early start on the holiday season, using fake stores, delivery texts and order alerts to steal payment details. Here are the seven schemes to recognize and the habits that block them.
Holiday shopping scams are already circulating weeks before Black Friday, and they work because they arrive while you are hunting for deals or waiting on packages. The most common schemes range from fake online stores and copycat websites to delivery texts demanding a redelivery fee, according to a CyberGuy report on the seasonal threat. The practical defense is the same in almost every case: verify through an official app or website instead of clicking the message in front of you.
What happened
Stores are promoting early deals and inboxes are filling with sales emails, and scammers are matching that rhythm. The report identifies seven recurring patterns:
- Too-good-to-be-true deals. Social media ads for name-brand goods at steep discounts, often with countdown clocks. Some fake stores take payment and ship nothing, or send counterfeits.
- Copycat stores. Sites that copy logos and layouts, with clues hidden in the web address — added words like “outlet” or “sale,” misspellings, or unfamiliar domains.
- Fake delivery notices. Texts and emails claiming a package could not be delivered and asking you to confirm your address, pay a small fee, or enter card details.
- Order-problem emails. Messages about failed payments, locked accounts or suspicious purchases, sometimes with a phone number that connects to a scammer.
- Gift card demands. Requests to pay bills, fees or urgent family needs with gift card numbers and PINs, which are hard to recover once shared.
- Fake charity appeals. Names resembling familiar organizations, or appeals tied to disasters and emotional stories.
- Marketplace bargains. Sellers on resale platforms who demand payment before inspection or push conversations off the platform.
The report cites the Federal Trade Commission’s warning that scammers often use social media ads for popular products at unusually low prices. It also notes that the U.S. Postal Service does not charge a fee for redelivery — a claim in a text asking for USPS payment is a warning sign.
Why it matters
These scams are built to blend into legitimate holiday traffic. When you are already expecting packages and sales messages, a fake notice is harder to spot. The report points out that a padlock icon or HTTPS connection only means the connection is encrypted; it does not prove a store is legitimate, and scammers can use encrypted sites too.
Payment method matters. Credit cards generally offer stronger legal protections for disputing unauthorized charges and purchases that never arrive, the report says. Gift cards, wire transfers and cryptocurrency are favored by scammers precisely because the money is difficult to recover.
Key facts at a glance
| Scam type | Common warning sign |
|---|---|
| Fake discount store | Unusually low price plus countdown clock or limited-inventory claims |
| Copycat website | Misspelled or altered web address; no real contact info; payment by gift card, wire or crypto |
| Delivery notice | Unexpected link asking for address, card number or a redelivery fee |
| Order-problem email | Phone number supplied in the message; pressure to install remote-access software |
| Gift card request | Demand to read card numbers and PINs to someone |
| Fake charity | Name similar to a known group; payment by gift card, crypto or wire |
| Marketplace seller | Payment demanded before inspection; push to move off the platform |
What this means for you
- Type a retailer’s official address into your browser or open its app rather than following an ad or message link.
- Check tracking through the carrier’s own app or website, using the number from your original order confirmation.
- Never call a phone number supplied in an unexpected order or billing alert; use contact details from the company’s official site.
- Use a credit card for online purchases and turn on purchase alerts with your bank or card issuer.
- Never share unexpected verification codes, and use multifactor authentication where offered.
- If you sent money, contact your payment provider immediately and report the incident at ReportFraud.ftc.gov.
Frequently asked questions
Does a padlock icon mean a shopping site is safe?
No. The report says HTTPS means the connection is encrypted, not that the seller is legitimate. Scammers can operate encrypted sites too.
Does USPS charge for redelivery?
According to the report, the Postal Service confirms it does not charge a redelivery fee. A text demanding payment to release a package is a warning sign.
What should I do if I entered my password on a scam site?
Change that password immediately through the legitimate site or app, and change any other accounts using the same password. Enable multifactor authentication and review the account for unfamiliar activity.
Where do I report a gift card scam?
Contact the company that issued the card and keep the receipt and card details. The report also directs victims to ReportFraud.ftc.gov.
What to watch next
The report does not name specific scam campaigns or estimate losses, so the scale of this season’s activity is not yet clear. Shoppers should expect the volume of fake delivery and order messages to rise as shipping deadlines approach.
- Seven common holiday scams include fake stores, copycat sites, delivery texts, order alerts, gift card demands, fake charities and marketplace sellers.
- HTTPS and padlock icons do not prove a store is legitimate.
- USPS does not charge a redelivery fee, so texts demanding payment are a warning sign.
- Credit cards offer stronger dispute protections than gift cards, wire transfers or cryptocurrency.
