The last minute rush to finish your Christmas holiday shopping in here! The cyber-criminals know that too. so you better make sure you’re not being silly with your cybersecurity. There are amazing deals to be found on the innerwebs as well as online scams. The bad guys want to take advantage of the holiday season to steal your important information.

Mashable recommends that you do your own due diligence and use common sense while shopping online. Here are some basics steps to take while buying your last minute Christmas holiday gifts.

Use familiar websites

To protect yourself while Christmas shopping online, start with a trusted website. Search results can be rigged. If you know the site, Mashable says chances are it’s less likely to be a rip-off. Do not trust results past the first few pages of links.

Most popular browsers will display a small lock icon in the URL bar to identify a secure website, so be sure to look out for that. Also beware of misspellings or sites using a different top-level domain (.gq instead of .com .au, for example)—those are the oldest tricks in the book, and are likely phishing scams, designed to fool you trusting them by dressing up as a website or service you trust. Yes, sales on these sites might look enticing, but that’s how they trick you into giving up your info.

Don’t overshare online

Be wary when online stores ask for more than they need. If a site’s checkout form includes data fields that aren’t in any way necessary for the transaction, that’s a sign you may want to reconsider the purchase. If those fields are marked as required, that’s worse. But if you are desperate to go ahead, Mashable recommends just lie! Fill the irrelevant required fields with made-up data.

Avoid public Wi-Fi

Do not connect to public Wi-Fi to do your holiday shopping. You are better off using your own Wi-Fi home to shop. If you use public Wi-Fi like in a cafe or shopping center, there’s a chance your transaction could be being captured by hackers. Even if you think you’ve connected to a known, safe Wi-Fi network, nothing prevents a scammer from setting up a portable Wi-Fi hotspot with an SSID that’s the same as that of your favorite coffee shop. Sometimes circumstances may require that you do your shopping while out and about. Mashable says you can improve your security by turning off Wi-Fi and just using cellular data (4G/5G) while shopping.

Use a VPN

Even if you’re shopping on a familiar website, from your home computer, there is still valuable information that can be scraped from your online interactions. Mashable says your IP Address is often visible to anyone who knows where to look. This can provide cyber criminals with not only your exact location, but often all the other devices that are connected to your network at any given time. To avoid this, the simplest solution is to install a VPN (or Virtual Private Network). This will encrypt your communications and prevent any possibility of snooping. It’s also just a great habit to get into, as a good VPN will provide protection without slowing down your network speeds too much.

Be password smart

Some shopping sites let you check out as a guest, just giving the one-time information needed for your transaction. Others require you to create a login identity complete with password and username. Remembering passwords is tough, so you may be tempted to just recycle the same password over and over. Don’t! Hackers know that many people indulge in password recycling. When attackers get credentials from one retailer, they quickly try the credentials at other, similar sites. If you don’t want to remember multiple passwords, the best solution to create strong, secure ones is to use a password manager.

Watch your back

Another benefit to shopping from home: nobody potentially looking over your shoulder. When you whip out your credit card and start typing the number into a website, nearby snoops have an opportunity to see and memorize the number. You can foil shoulder-surfers by staying alert, sitting with your back to the wall, and keeping your screen shielded. Better yet, use your password manager to fill in saved credit card data, while the card itself stays safe in your wallet.

Check your bank statements regularly

Don’t wait for your bill to come at the end of the month. Go online regularly during the holiday season and look at electronic statements for your credit card, debit card, and checking accounts. Look for any fraudulent charges, even originating from payment sites like PayPal and Venmo. (After all, there’s more than one way to get your money.) Always keep track of your purchases online, and you will know straight away if something is wrong.

Stay informed

Once you have yourself and your devices fully protected, take the next step. Online threats are becoming more and more sophisticated every year, and you need to ensure you’re up to date with all the latest threats, as well as tips and tricks from cybersecurity professionals. Follow a security blog that is consistently updated as the industry shifts and threats evolve.

How you can help Ukraine!

Related article

• Holiday gifts to be bought by consumers in the United States in 2023, by category  (Statista)

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedIn, Facebook, and Twitter. Email the Bach Seat here.