AI voice-cloning scams: how to protect your family with a safe word
A plain-English guide to AI voice-cloning scams, how family emergency calls get faked, and the one shared safe-word rule that stops many panic-driven losses.
Read articlePersonal Security
Online shopping scams during the holidays: how to spot fake deals before you click
A plain-English holiday shopping scam guide covering fake online stores, scam ads, package-text tricks, and the payment red flags that matter before you buy.
Individuals
The fastest way to avoid a holiday shopping scam is to slow down before the click. If the deal is unusually cheap, the seller is unfamiliar, and the payment options are gift cards, crypto, wire transfer, or a payment app, you should assume you are looking at a scam until proven otherwise.
That is not overcautious. The FBI says non-payment and non-delivery scams cost people more than $503 million in 2025, and credit card fraud accounted for another $282 million in reported losses. The FTC and USPS warnings line up with that pattern: fake stores, fake ads, fake package texts, and pressure to pay in ways that are hard to reverse.
Sources: FBI holiday scams, FTC holiday shopping scam alert, USPIS package-tracking text scam warning
The answer first: what usually gives fake deals away
Holiday shopping scams usually show the same few signs:
- the price looks unusually low for a brand-name item
- the seller is new to you
- the ad came through social media, text, or a marketplace message
- the site pushes urgency like "today only" or "almost gone"
- the payment methods are hard to reverse
The FTC's holiday shopping guidance says scammers often impersonate real companies and run ads for brand-name products at unusually low prices. If you click, you may end up paying for a counterfeit item, the wrong item, or nothing at all.
Source: FTC holiday shopping scam alert
Scam type 1: fake online stores built around a "too good to be true" price
This is still the main pattern.
The store may look polished. The product photos may look real because they were stolen from a legitimate seller. The only thing you are really meant to trust is the emotion of the deal.
The FBI's holiday scam guidance says to be wary of deals that seem too good to be true. The FTC says to research the seller and the exact website URL before buying, especially when the seller is unfamiliar.
Sources: FBI holiday scams, FTC online shopping guidance
The fastest test is not "Does the page look professional?" The fastest test is "Would a legitimate retailer really be selling this item here, at this price, from this domain?"
Scam type 2: social media ads that impersonate brands
The FTC says scammers are especially active on social media and sometimes impersonate real companies in ads for brand-name products.
That is why a social ad should not get a free trust pass just because the brand name is familiar. The ad may borrow the brand. The domain may still be fake.
Source: FTC holiday shopping scam alert
Before buying from an ad:
- open the brand's real site yourself in a separate tab
- compare the deal
- inspect the seller's exact domain, not just the logo
- search the seller name and URL with
review,complaint, orscam
That research step comes directly from FTC guidance, and it is still one of the highest-return habits in consumer security.
Scam type 3: package tracking and delivery texts
Holiday shoppers get more shipping notifications, which makes fake delivery messages more believable.
The U.S. Postal Inspection Service warns that unsolicited package-tracking texts with unfamiliar links are smishing scams. The message may say your delivery is delayed, a small fee is due, or your address needs to be verified. The goal is to get you to click the link and hand over information or payment.
Source: USPIS package-tracking text scam warning
The practical rule is simple: if you think a shipment is real, check it in the retailer account or the carrier site you open yourself. Do not trust the link in the text.
Scam type 4: fake payment urgency
The FTC says if a seller insists on payment by gift card, wire transfer, payment app, or cryptocurrency, it is probably a scam.
That is one of the clearest red flags in the whole category because scammers prefer payment methods that are hard to reverse.
Source: FTC holiday shopping scam alert
The FBI says to use a credit card when shopping online and to dispute suspicious charges with the card company.
Source: FBI holiday scams
So the safe hierarchy is straightforward:
- credit card
- debit card only if you trust the seller
- avoid gift cards, wire transfers, crypto, and pressure-filled payment-app requests
The five checks I would use before buying from an unfamiliar site
If I were buying from a seller I had never used before, I would do these five checks first:
- Search the seller name and exact URL with
review,complaint, orscam. - Look closely at the domain name and confirm it is the real seller, not a copycat.
- Check whether the payment options are normal for a legitimate retailer.
- Be suspicious if the price is unusually low across many products, not just one.
- Use a credit card if I decide to proceed.
Those checks are mostly FTC and FBI guidance translated into normal-person workflow.
What to do if you already clicked
If you clicked but did not buy, close the page and do not keep exploring out of curiosity.
If you entered payment information, the FTC says to contact the credit card company or bank and report the charge as fraudulent if necessary. If you entered login credentials, change that password anywhere it was reused and turn on MFA on the account.
Sources: FTC: what to do if you were scammed, FTC two-factor authentication guidance
If the click came through a suspicious message, the broader family cybersecurity guide is the best live next step on the site.
Why older relatives get hit harder during shopping season
Holiday shopping scams do not only target "online deal hunters." They also target older adults who are managing gifts, packages, shipping texts, or urgent calls about an order problem.
That is one reason this topic overlaps naturally with the live guide on protecting aging parents from online scams. The pressure pattern is the same even when the branding changes.
The better holiday shopping rule
The best household rule is boring:
"No purchase from an unfamiliar seller happens on the first emotional impulse."
That means:
- do not buy from the ad without checking the seller
- do not trust delivery texts without checking the order directly
- do not pay with a method the scammer chose because it is convenient for them
- do not let countdown timers make the decision for you
The live complete family cybersecurity guide fits here because scam prevention is mostly process, not software.
Where paid help fits, if the household keeps getting hit
Some households do not need another article. They need a simpler operating model and a second set of eyes on the devices and accounts that matter.
If holiday scam pressure is part of a broader family-risk picture, the most relevant commercial next step is the individuals advisory page.
Final answer
To spot fake holiday deals before you click, ignore the polish and inspect the structure.
Ask who is selling, what domain they are using, how they want to be paid, and whether the price only makes sense if you stop thinking for thirty seconds. That pause catches most fake-store, fake-ad, and fake-delivery scams before money moves.
FAQ
What is the biggest red flag in a holiday shopping scam?
An unusually cheap deal from an unfamiliar seller combined with pressure and a hard-to-reverse payment method is the clearest pattern.
Are social media ads safe?
Some are legitimate, but the FTC says scammers use social media ads and impersonate real brands. Treat the ad as a lead, not proof.
How can I check whether an online store is fake?
Search the seller name and exact URL with review, complaint, or scam, inspect the domain, and be cautious if the only payment options are gift cards, wire transfer, payment apps, or cryptocurrency.
What should I do if I clicked a fake shopping link?
If you entered payment data, contact the card issuer or bank immediately. If you entered account credentials, change the password anywhere it was reused and turn on MFA.
Are package delivery texts from USPS always real?
No. USPIS warns that unsolicited package-tracking texts with unfamiliar links are a common scam pattern.
Sources and references
Last updated
June 15, 2026. We refresh this content as the threat landscape and tools evolve.
FAQ
Questions readers usually ask next
What is the biggest red flag in a holiday shopping scam?
The fastest single red flag is a deal that creates urgency and pushes you toward an unfamiliar seller, especially if the seller wants payment by gift card, wire transfer, payment app, or cryptocurrency.
Are social media shopping ads safe?
Some are real, but the FTC says scammers use social media ads and impersonate real brands to push people toward scam sites with unusually low prices.
How can I check if an online store is fake?
Search the seller name and website URL with words like review, complaint, or scam, inspect the exact web address, and avoid paying if the only options are hard-to-reverse methods.
What should I do if I clicked a fake shopping link?
If you entered payment information, contact the card issuer or bank immediately. If you entered login information, change that password anywhere it was reused and turn on MFA on the affected account.
Are package delivery text messages from USPS always real?
No. The U.S. Postal Inspection Service warns that unsolicited package-tracking texts with unfamiliar links are often smishing scams.
Related reading
Keep going
Do you really need a VPN? An honest 2026 answer
A plain-English guide to whether most people actually need a VPN in 2026, what a VPN really does, when it helps, and what it does not protect you from.
Read articleGovernment impersonation scams: when the IRS, SSA, or Medicare calls
A plain-English guide to government impersonation scams, including IRS, Social Security, Medicare, and FTC fake-contact schemes, with the red flags families should treat as immediate warnings.
Read article