Personal Security

Online shopping scams during the holidays: how to spot fake deals before you click

A plain-English holiday shopping scam guide covering fake online stores, scam ads, package-text tricks.

Individuals

The fastest way to avoid a holiday shopping scam is to slow down before the click. If the deal is unusually cheap, the seller is unfamiliar, and the payment options are gift cards, crypto, wire transfer, or a payment app, you should assume you are looking at a scam until proven otherwise.

That is not overcautious. The FBI says non-payment and non-delivery scams cost people more than $503 million in 2025, and credit card fraud accounted for another $282 million in reported losses. The FTC and USPS warnings line up with that pattern: fake stores, fake ads, fake package texts, and pressure to pay in ways that are hard to reverse.

Sources: FBI holiday scams, FTC holiday shopping scam alert, USPIS package-tracking text scam warning

The answer first: what usually gives fake deals away

Holiday shopping scams usually show the same few signs:

  • The price looks unusually low for a brand-name item
  • The seller is new to you
  • The ad came through social media, text, or a marketplace message
  • The site pushes urgency like "today only" or "almost gone"
  • The payment methods are hard to reverse

The FTC's holiday shopping guidance says scammers often impersonate real companies and run ads for brand-name products at unusually low prices. If you click, you may end up paying for a counterfeit item, the wrong item, or nothing at all.

Source: FTC holiday shopping scam alert

Scam type 1: fake online stores built around a "too good to be true" price

This is still the main pattern.

The store may look polished. The product photos may look real because they were stolen from a legitimate seller. The only thing you are really meant to trust is the emotion of the deal.

The FBI's holiday scam guidance says to be wary of deals that seem too good to be true. The FTC says to research the seller and the exact website URL before buying, especially when the seller is unfamiliar.

Sources: FBI holiday scams, FTC online shopping guidance

The fastest test is not "Does the page look professional?" The fastest test is "Would a legitimate retailer really be selling this item here, at this price, from this domain?"

Scam type 2: social media ads that impersonate brands

The FTC says scammers are especially active on social media and sometimes impersonate real companies in ads for brand-name products.

That is why a social ad should not get a free trust pass just because the brand name is familiar. The ad may borrow the brand. The domain may still be fake.

Source: FTC holiday shopping scam alert

Before buying from an ad:

  1. Open the brand's real site yourself in a separate tab
  2. Compare the deal
  3. Inspect the seller's exact domain, not just the logo
  4. Search the seller name and URL with review, complaint, or scam

That research step comes directly from FTC guidance, and it is still one of the highest-return habits in consumer security.

Scam type 3: package tracking and delivery texts

Holiday shoppers get more shipping notifications, which makes fake delivery messages more believable.

The U.S. Postal Inspection Service warns that unsolicited package-tracking texts with unfamiliar links are smishing scams. The message may say your delivery is delayed, a small fee is due, or your address needs to be verified. The goal is to get you to click the link and hand over information or payment.

Source: USPIS package-tracking text scam warning

The practical rule is simple: if you think a shipment is real, check it in the retailer account or the carrier site you open yourself. Do not trust the link in the text.

Scam type 4: fake payment urgency

The FTC says if a seller insists on payment by gift card, wire transfer, payment app, or cryptocurrency, it is probably a scam.

That is one of the clearest red flags in the whole category because scammers prefer payment methods that are hard to reverse.

Source: FTC holiday shopping scam alert

The FBI says to use a credit card when shopping online and to dispute suspicious charges with the card company.

Source: FBI holiday scams

So the safe hierarchy is straightforward:

  1. Credit card
  2. Debit card only if you trust the seller
  3. Avoid gift cards, wire transfers, crypto, and pressure-filled payment-app requests

The five checks we would use before buying from an unfamiliar site

Before buying from an unfamiliar seller, we would do these five checks first:

  1. Search the seller name and exact URL with review, complaint, or scam.
  2. Look closely at the domain name and confirm it is the real seller, not a copycat.
  3. Check whether the payment options are normal for a legitimate retailer.
  4. Be suspicious if the price is unusually low across many products, not just one.
  5. Use a credit card if you decide to proceed.

Those checks are mostly FTC and FBI guidance translated into normal-person workflow.

What to do if you already clicked

If you clicked but did not buy, close the page and do not keep exploring out of curiosity.

If you entered payment information, the FTC says to contact the credit card company or bank and report the charge as fraudulent if necessary. If you entered login credentials, change that password anywhere it was reused and turn on MFA on the account.

Sources: FTC: what to do if you were scammed, FTC two-factor authentication guidance

If the click came through a suspicious message, the broader family cybersecurity guide is the best live next step on the site.

Why older relatives get hit harder during shopping season

Holiday shopping scams do not only target "online deal hunters." They also target older adults who are managing gifts, packages, shipping texts, or urgent calls about an order problem.

That is one reason this topic overlaps naturally with the live guide on protecting aging parents from online scams. The pressure pattern is the same even when the branding changes.

The better holiday shopping rule

The best household rule is boring:

"No purchase from an unfamiliar seller happens on the first emotional impulse."

That means:

  • Do not buy from the ad without checking the seller
  • Do not trust delivery texts without checking the order directly
  • Do not pay with a method the scammer chose because it is convenient for them
  • Do not let countdown timers make the decision for you

The live complete family cybersecurity guide fits here because scam prevention is mostly process, not software.

Where paid help fits, if the household keeps getting hit

Some households do not need another article. They need a simpler operating model and a second set of eyes on the devices and accounts that matter.

If holiday scam pressure is part of a broader family-risk picture, the most relevant commercial next step is the individuals advisory page.

Final answer

To spot fake holiday deals before you click, ignore the polish and inspect the structure.

Ask who is selling, what domain they are using, how they want to be paid, and whether the price only makes sense if you stop thinking for thirty seconds. That pause catches most fake-store, fake-ad, and fake-delivery scams before money moves.

FAQ

What is the biggest red flag in a holiday shopping scam?

An unusually cheap deal from an unfamiliar seller combined with pressure and a hard-to-reverse payment method is the clearest pattern.

Are social media ads safe?

Some are legitimate, but the FTC says scammers use social media ads and impersonate real brands. Treat the ad as a lead, not proof.

How can I check whether an online store is fake?

Search the seller name and exact URL with review, complaint, or scam, inspect the domain, and be cautious if the only payment options are gift cards, wire transfer, payment apps, or cryptocurrency.

If you entered payment data, contact the card issuer or bank immediately. If you entered account credentials, change the password anywhere it was reused and turn on MFA.

Are package delivery texts from USPS always real?

No. USPIS warns that unsolicited package-tracking texts with unfamiliar links are a common scam pattern.

Sources and references

Last updated

June 15, 2026. We refresh this content as the threat landscape and tools evolve.

FAQ

Questions readers usually ask next

What is the biggest red flag in a holiday shopping scam?

The fastest single red flag is a deal that creates urgency and pushes you toward an unfamiliar seller, especially if the seller wants payment by gift card, wire transfer, payment app, or cryptocurrency.

Are social media shopping ads safe?

Some are real, but the FTC says scammers use social media ads and impersonate real brands to push people toward scam sites with unusually low prices.

How can I check if an online store is fake?

Search the seller name and website URL with words like review, complaint, or scam, inspect the exact web address, and avoid paying if the only options are hard-to-reverse methods.

What should I do if I clicked a fake shopping link?

If you entered payment information, contact the card issuer or bank immediately. If you entered login information, change that password anywhere it was reused and turn on MFA on the affected account.

Are package delivery text messages from USPS always real?

No. The U.S. Postal Inspection Service warns that unsolicited package-tracking texts with unfamiliar links are often smishing scams.

Full bio & provenanceSee related service

Related reading