With the final weekend before Christmas approaching, many shoppers will be seeking last-minute presents and bargains.

However, the National Cyber Security Centre (NCSC) has warned consumers not to fall for fake shopping sites or fall foul of seasonal scams in the rush to get everyone presents.

With less than a fortnight to go until Christmas, and guaranteed delivery windows rapidly shutting, the NCSC has provided advice on protecting devices and shopping securely online.

Since the coronavirus pandemic forced more of our lives online, Christmas shopping is increasingly taking place on digital channels, with UK Finance revealing that last December saw a higher proportion of online shopping than any other previous year.

The last-minute dash for buying presents can leave people more vulnerable to falling for scams, especially those that use topical ‘lures’ such as spoofing retailers or delivery companies.

NCSC Director for Policy and Communications Nicola Hudson said: “It’s great that people have the option to buy online as we enter the final days of Christmas shopping, but they should be alert to opportunistic scammers at this time of year.

“The good news is that there are common signs of a scam that people can look for, for example offers that seem too good to be true or claim that particular items are in short supply.

“To protect themselves, there are practical steps people can take, from setting a strong password on accounts to researching a brand before buying – much more can be found on this on the NCSC’s website.”

Recommended

• C-Suite leaders must get on the same page on automation cybersecurity
• Apache releases another patch in wake of new Log4j vulnerability
• Further growth for Scots WellTech Frog Systems after four new hires

To avoid gifting the scammers this Christmas, the NCSC is advising shoppers to take steps to protect themselves when shopping online by following the NCSC cyber safety-first shopping checklist:

• Keep your accounts secure – make sure you use strong and separate passwords for your most important accounts such as email, banking, or payment accounts (such as PayPal). The NCSC recommends using three random words to create your passwords. Also turn, on two-factor authentication (2FA) to add an extra layer of protection.
• Be aware of emails, text messages or websites that look too good to be true or suspicious – many scammers set up fake messages designed to steal your money and personal details. If something doesn’t feel right, you can report it to the NCSC.
• Choose carefully where you shop – research on online retailers to check they’re legitimate before you buy, for example look at consumer websites you trust. Some emails or texts you receive about amazing offers may contain links to fake websites. If you’re unsure, don’t use the link!
• Use a credit card for online payments if you have one – most major credit card providers protect online purchases and are obliged to refund you in certain circumstances.
• Only provide enough details to complete your purchase – only fill in the mandatory details on a website when making a purchase (often marked with an asterisk).

In addition, suspicious emails can be reported to the NCSC through its Suspicious Email Reporting Service (SERS), while suspected scam text message can be forwarded to 7726.

Get the latest news from DIGIT direct to your inbox

Our newsletter covers the latest technology and IT news from Scotland and beyond, as well as in-depth features and exclusive interviews with leading figures and rising stars.

We will keep you up to date on the pivotal issues impacting the sector and let you know about key upcoming events to ensure that you don’t miss out on what’s going on across the Scottish tech community.

Click here to subscribe.