The thrill of the click is undeniable—just a few taps on your screen and that must-have item is on its way to your doorstep. However, this convenience comes with a price. Online shopping can expose you to risks, from phishing scams to fraudulent sellers.
Here are some best practices that every consumer should use for a safer online shopping experience.
1. Research the Website and Seller
Before you click "Buy Now," take a moment to investigate the website and seller. Look-alike sites are increasingly sophisticated, mimicking legitimate retailers. Plus, with the rise of small businesses and emerging brands on social media, it's harder to tell which ones are genuine. These tips can help screen out the scammers.
Give the URL a once-over
Often a scam site will have a slight misspelling or add an extra word to fool you, such as Amazon-official-store or BestBuy-electronics.
Dig into the seller's reputation
Check to see if there's contact information—you can even send a quick email with a question to see if they respond. Then, look for customer reviews and active social media accounts.
Finally, do a quick Google search, which can reveal a lot about their track record. Try searching the name of the brand and “scam" to see what pops up.
Verify security features
The website's URL should start with “HTTPS" and have a lock icon in the address bar.
2. Protect Your Personal Information
Cybercriminals are constantly seeking to exploit sensitive data. While the busy online holiday shopping season offers plenty of unsuspecting targets, there are ways to significantly reduce your risk.
Use strong passwords
“ABCDE" doesn't cut it. The Cybersecurity & Infrastructure Security Agency (CISA) recommends using a password that's at least 16 characters and includes a mix of uppercase and lowercase letters, numbers and symbols. The best passwords are random, such as a complex string of these mixed case keys, or a passphrase, which is four to seven unrelated words. Don't reuse passwords across sites.
Avoid using public Wi-Fi
Open networks in stores, airports or restaurants are often unsecured, making it easy for hackers to intercept your data and gain access to your device. It's best to wait until you're on a secure network, like at home or your office, to make online transactions. If you feel you must nab a flash deal on the go, your own mobile data is likely more secure than public Wi-Fi.
Opt for secure payment methods
The website should offer various secure payment options, including using a credit card, which often gives you the most protection. (Bonus: With the right credit card, you can rack up rewards points just by making purchases you would anyway.) And don't ever pay someone in gift cards; that's often a scam.
Cancel old online accounts
Many of us have abandoned online accounts created with brands years ago for that one-time discount or free shipping. These lingering accounts can pose a risk—especially if you reuse login credentials across multiple sites—because a cybercriminal could apply credentials from a compromised site to other active accounts. To minimize this threat, search through your operating systems to identify active accounts and note those you no longer use so you can delete them. A free app called Permission Slip from Consumer Reports can be a handy tool to help you automatically delete accounts on hundreds of websites.
3. Know the Signs of Phishing Scams
Cybercriminals use phishing to trick individuals into revealing sensitive information. By recognizing the signs of a phishing attempt, you can protect yourself from falling victim and safeguard your personal information.
Look closely to identify suspicious emails and links
Phishing scams often involve emails or messages that appear to be from legitimate sources, such as your bank, an online retailer or a shipping company. They could even be from a brand you've done business with before, which can make it tempting to click. If an email seems suspicious, don't click on any links or download attachments.
Double-check information
Phishing scams often rely on creating a sense of urgency or panic to trick victims into revealing sensitive information. If you receive an email or message requesting personal information, verify the authenticity of the request. Contact the organization directly using a phone number or email address you find independently online so you can be assured it's genuine, rather than clicking a link in the email you received, which could send you straight to the scammers. Note that financial institutions like Synchrony will never proactively contact you for this information.
Report suspicious activity
The Federal Trade Commission (FTC) encourages people to report scams so they can build a case and help prevent others from falling victim to the same scam. You can file a report here.
4. Protect Your System
It's critical to be vigilant when downloading apps or programs to ensure they are familiar and verified. But there are other ways to help protect your computer and mobile devices.
Run the latest version of your device's operating systems
While an update can be a pain when you're in the middle of a project, these regular refreshes are designed to include the newest security features or a patch for a known issue. Turn on the automatic update feature on all your devices so you never miss one.
Enable your computer's firewall
Activating a firewall helps protect your system by monitoring and controlling incoming and outgoing network traffic. Firewalls can help prevent unauthorized access to your system, making it more difficult for hackers to exploit vulnerabilities and steal sensitive information. They also make your system less visible to potential attackers by ignoring unauthorized connection attempts.
Download a reputable third-party antivirus software
Sometimes you need an extra boost from a software program specifically designed to protect devices from malware. This article has some picks to consider.
5. Monitor Account Activity
By regularly monitoring your financial accounts and promptly reporting fraudulent activity, you can protect yourself from financial loss and help prevent further cybercrime. Here's what to do.
Check bank and credit card statements
Consistently reviewing your bank and credit card statements can help you detect suspicious activity or fraudulent transactions. Look for charges from unknown merchants or locations and duplicate or incorrect transactions.
Report any fraudulent activity
If you notice any suspicious or fraudulent activity on your statements, report it to your bank or credit card company immediately. You can contact Synchrony at 1-866-834-3205 to begin the process. Prompt action can help minimize damage and prevent further fraud.
As E-Commerce Evolves, So Does Fraud
The unprecedented convenience and choice of online shopping make it the dominant purchasing channel for many. These simple steps can offer peace of mind by providing an extra layer of protection against potential fraud.
Looking for more savvy shopping tips? Check out How To Protect Yourself From AI Fraud and Scams in Banking.
