How to shop smart and scam-free this Christmas
)
’Tis the season for shopping scams, which surge at this time of year. Here’s how you can stay safe
By Virgin Media Edit
- Published
- 10 December 2025
The final weeks of the year are a real shopping frenzy. From Black Friday and Cyber Monday to the pre-Christmas rush and the Boxing Day sales, the internet is teeming with eye-catching deals. But it’s not just retailers who are busy at the end of the year – scammers are too. When people are eager to grab a bargain, they’re often less cautious and vulnerable to scams. Can you spot the scam signs? Here’s how to avoid them and stay safe online with advice from F-Secure, the experts behind Virgin Media Advanced Security.
Common Christmas shopping scams
According to Barclays, purchase scam losses surged by 22% during Black Friday and Cyber Monday in 2023. This includes fake websites, phishing emails, scam texts and malicious apps. Data from F-Secure also shows a sharp rise in scam activity, with blocked scam websites in late 2024 nearly tripling compared with the rest of the year.
Scammers use urgency, excitement and high traffic volumes to target their victims via inboxes, social feeds and search results. If you fall victim to a scam, the scammer can make purchases or open credit accounts in your name, gain access to your email and banking apps, and even sell your personal details on the dark web. If you're shopping online this season, here’s what to look out for to avoid getting caught.
During peak shopping periods, scammers launch convincing fake stores faster than ever. These sites often mimic real retailers or feature trending gift items with big discounts. The designs look professional, the reviews seem glowing – but once you pay, the product never arrives. Worse, your credit card details and personal information may be harvested and used for further fraud.
To stay safe: Always double-check the URL, as scam sites often include out-of-place characters (like annazon.co.uk) or use unfamiliar domains. If the site is new, or the deal seems suspiciously good, it’s worth a quick background check before you buy.
When inboxes and social feeds are flooded with promotions, scammers blend in using phishing emails, fake shipping alerts and ads that mimic real brands. These messages often contain urgent language – “Limited time offer!” or “Problem with your delivery” – to prompt a quick click, but clicking the link can lead to a fake login page, a malware download or a bogus payment request.
To stay safe: Don’t click on links from unexpected messages, even if they appear to be from familiar brands. Navigate to the retailer’s site directly or use their official app.
Some scam sites don’t stop at luring you in – they go further by collecting full payment information on phony checkout pages. These pages may use HTTPS and even a padlock icon, but once you submit your card info, the scammers get your info too. Scammers may even redirect you to the real store afterward to avoid suspicion.
To stay safe: Again, check the domain name closely – the padlock symbol is helpful, but not foolproof. Fake payment pages can look completely identical to real ones, so have active protection that automatically checks the authenticity.
One increasingly common tactic is sending links to download fake tracking or shipping apps, claiming to help you manage deliveries. These apps are actually malware, capable of stealing passwords, reading messages or monitoring activity in the background. Scammers often pose as sellers, couriers, or even customer support to get these apps installed.
To stay safe: Never download an app based on a message or email. Use trusted app stores and search for the app yourself rather than clicking third-party links. Use antivirus protection that blocks malicious apps automatically.
5 tips for staying safe this shopping season
According to recently published data from the Global Anti-Scam Alliance (GASA), an astonishing 76% of adults in Britain have encountered a scam, and a shocking 20% have lost money to scammers.
A few simple precautions can go a long way in staying safe.
1. Don’t trust links in messages
)
The most common way to come into contact with scammers is via a platform with a direct message function. GASA’s data shows that 64% of active scammers use email, 53% use phone calls and 52% use text messages. But social media, digital ads and even old-fashioned physical mail are also used.
Whatever the method, always be cautious about clicking links. Phishing often relies on urgency and surprise. If it’s important, it’ll still be there when you search for it manually.
2. Stick to trusted retailers
)
Shopping scams are the most commonly experienced type of scam in the UK, affecting 45% of those targeted. You hear stories about incredible deals on furniture that turns out to be doll’s house-sized, but sometimes the item is completely different from what’s advertised or even non-existent.
If you’re unfamiliar with the seller, research them: look for contact details, refund policies and independent customer reviews on sites like TrustPilot. Sticking to well-known, established retailers should help you avoid any problems here.
3. Watch out for pressure tactics
)
“Only one left!” “Deal ends in five minutes!” These are classic scam triggers. And according to GASA’s figures, some people take more than a day to realise that a scam is a scam, including 16% of millennials, 16% of people living in urban areas, and 25% of those approached by scammers on Snapchat. All it takes is a few moments’ thought and a quick check to verify before buying.
Don’t allow yourself to be rushed – remember, being scammed isn’t just missing out on a deal, it’s potentially having your personal details compromised.
4. Use strong, unique passwords
)
Use different passwords for each shopping site – and make sure they’re hard to guess. New research from tech company Nordpass suggests that the UK’s most common passwords are variations on “admin”, “password1” and “123456”, so be a little more creative and try using a mixture of letters, numbers and symbols. It’s also best to avoid using personal information like names, addresses and birthdays as these can be predictable. A password manager helps immensely in both creating and remembering unique passwords.
The most common way to come into contact with scammers is via a platform with a direct message function. GASA’s data shows that 64% of active scammers use email, 53% use phone calls and 52% use text messages. But social media, digital ads and even old-fashioned physical mail are also used.
5. Enable multi-factor authentication
)
Multi-factor authentication (MFA) adds an extra layer of security to your accounts, making it harder for scammers to log in even if they get your password. Even if a hacker has correctly guessed a password, having MFA set up (such as a facial recognition or a text message code) will help to prevent them from accessing further information.
How to upgrade to Virgin Media Advanced Security
Kick things up a notch with our award-winning Advanced Security add-on for £3.50 a month. It’s packed with premium features that’ll keep you safe on as many devices as you need – even when you’re not connected to your home WiFi. Sign up here for Virgin Media Advanced Security to start your no-commitment three-month trial today. No bank or credit card details are required for the trial. Then download it on all your online devices to get going.
Virgin Media Essential Security: online security built into your network
Don’t forget that for Virgin Media broadband customers, Essential Security is always on guard, picking up on scam websites and warning you before your devices are exposed to anything malicious. That means your family can browse to the max, knowing we’ve got your backs. The best bit? It’s built into your internet connection at the core network level, at no extra cost – and it’s automatically activated when you join us, so you don’t need to lift a finger. Manage your Essential Security, including parental controls, from My Virgin Media.
Virgin Media services are only available in eligible Virgin Media network areas. All of the products on this page are subject to survey, network capacity and a credit check.
Virgin Media Advanced Security: New Virgin Media Advanced Security customers only. Registration required. One subscription per Virgin Media customer. Not available on BlackBerry. Unlimited devices, after the first 15 devices will need to be registered via F-Secure. £3.50 per month or annual subscription for £35 after trial period. See here for full details.
See here for F-Secure licence terms.
You can find the full GASA State of Scams 2025 report here.
)
)
)
)