The holidays are a time for family gatherings, glittering lights, and a shopping frenzy that can easily turn into a nightmare if you’re not careful. Scammers know that our wallets are open, our emotions are high, and our attention is split between gifting, travel, and festivities. That’s why holiday scams spike every December, and why it’s more important than ever to brush up on holiday security.
Below, we break down the ten most common (and costly) scams that surface each year, explain how they work, and give you practical steps to dodge them. Keep this list handy, share it with friends and relatives, and you’ll be wellarmed against the season’s most sneaky tricks.
1. Fake LastMinute Shipping Emails
What it looks like
An email purports to be from a major courier (UPS, FedEx, DHL) saying your package is stuck at customs or needs a fee to be released. The subject line reads something urgent: “Action Required – Your Xmas Gift Is Delayed!” The email contains a link to a beautifully designed payment portal.
Why it works
The holiday rush makes people nervous about missing delivery dates. The email’s branding and tone look official, and the link often leads to a cloned login page that harvests credentials.
How to protect yourself
Never click links in unsolicited shipping emails. Open a new browser tab and type the carrier’s official website yourself.
Check the sender address – most legitimate carriers use domain names like @fedex.com. Look out for extra characters or misspellings (e.g., @fedex-security.com).
Enable twofactor authentication (2FA) on your shipping accounts. Even if a password is compromised, the attacker will need the second factor.
2. Charity TexttoDonate Scams
What it looks like
During the holidays, you’ll receive a text that says, “Give the gift of hope – donate $25 to Help Kids This Christmas. Text ‘GIVE’ to 55555.” The message often references a recent natural disaster or local shelter.
Why it works
People are generous at this time of year, and a short, simple code feels safe. Scammers register similar shortcodes and forward the money to their own accounts.
How to protect yourself
Verify the organization on its official website before giving. Most reputable charities provide a “Donate” button directly on the site, not via text.
Use a credit card for charitable giving; it offers better fraud protection than mobilebilling.
Report suspicious texts to your carrier (most have a forwarding number like 7726) and to the FTC.
3. Fake Online Marketplaces & TooGoodtoBeTrue Deals
What it looks like
A flashy ad on social media promotes a highend gadget, designer bag, or holiday décor for a fraction of the retail price. The link sends you to a site that looks like Amazon, eBay, or a boutique store.
Why it works
Holiday shoppers love bargains. The site often accepts credit cards without SSL (no lock icon) and then disappears after you pay, leaving you with a blank receipt or a “order confirmed” email that never resolves.
How to protect yourself
Shop only from trusted retailers and verify the URL (look for “https” and the correct domain).
Read reviews of the seller and watch for red flags: extremely low ratings, many “unverified” buyers, or a lack of contact information.
Use a credit card with zerointerest “purchase protection” or a virtual card number that expires after one transaction.
4. Holiday Travel Ticket Scams
What it looks like
You receive an email or a popup offering cheap flight or train tickets for popular holiday routes. The deal includes a “limitedtime offer” and a discount code that appears to work.
Why it works
Travel costs soar during the holidays, so a lower price seems unbeatable. After you enter payment details, the site either goes dark or sends you a “ticket” that’s invalid.
How to protect yourself
Book directly through airline or railway websites, or trusted agencies like Expedia, Kayak, or the carrier’s official app.
Check the URL and look for the padlock icon before entering payment info.
Set up price alerts on legitimate sites; they’ll notify you when genuine sales appear.
5. Gift Card Phishing Scams
What it looks like
A message (email, SMS, or social media DM) pretends to be from a friend or colleague asking for an urgent giftcard purchase. The note claims they’re stuck overseas or need to pay a holidayparty vendor.
Why it works
Gift cards are untraceable. Once the code is shared, the scammer redeems it instantly. The sense of urgency (“I need it now, before the party”) pushes victims to act without thinking.
How to protect yourself
Never send giftcard codes via email or text unless you’re absolutely sure of the recipient’s identity.
Verify the request by contacting the person through a different channel (e.g., call them).
Educate family members, especially older adults, that reputable companies never ask for giftcard numbers as payment.
6. Holiday Sweepstakes & Free Gift Scams
What it looks like
You see a popup on a retail site or a landing page promising a free “Christmas hamper” if you fill out a short form. The fine print says you’ll be entered into a sweepstakes.
Why it works
Everyone loves freebies, especially at holiday parties. The form often asks for personal data—full name, address, phone, and sometimes even Social Security numbers.
How to protect yourself
Treat any “free” offer with skepticism, especially if you must give sensitive data to claim it.
Read the privacy policy and look for “no purchase necessary” language; legitimate contests are required by law to have it.
Use a disposable email address for such signups to keep your primary inbox clean.
7. Holiday Home Rental Scams
What it looks like
A listing on a popular vacationrental site promises a picturesque cabin for the holidays at a price lower than neighboring properties. The host asks for a wire transfer or a prepaid card to secure the booking.
