DO: Use Unique Passwords for all Online AccountsWhen shopping online, and the website requires you to create an account, use a unique password for every site, and do not use the same password as banks, social media, or other retailers. If one location is breached by a cyberattack, then the password cannot be re-used at another location to propagate a crime. Understandably it is difficult to remember all the passwords and users should consider a password manager like Apple’s iCloud Keychain to help create random passwords and remember them automatically.
DO: Examine all “Too Good to be True” Email OffersThe most common attack vector for hackers today is phishing emails. Be aware of fake emails from popular websites with incredible deals. They are probably just a scam linking you to a fake website that looks like the real thing, just to steal your credentials (password) and possibly your credit card too. Always check the URL (link) in the email and make sure it goes to the correct site before clicking on it. You can easily see it by hovering over the picture or right clicking and selecting copy link. Then you can paste it into a browser and verify it is real verses clicking on the link in the email.
DO: Look for Secure Website EncryptionWhen visiting a web site for a purchase, make sure that when you click on the cart and check out, the website is encrypting the traffic using HTTPS. This ensures no one can snoop on the data you are transmitting or receiving. Checking to make sure the site’s communications are encrypted is as simple as looking for a “pad lock” in the URL browser address field or seeing if HTTP or HTTPS is present with a red hash. If you see the later, avoid purchasing any items since the vendor is not protecting your transactions electronically with encryption. This typically happens with smaller merchants or fake websites designed to steal your information.
DO: Update all Security Patches Before ShoppingBefore surfing the web for the best deals, make sure your computer, laptop, tablet, and even cell phone are up to date with the latest security patches and operating system versions. Using search engines to find deals can unfortunately display malicious sites that can take advantage of operating system, browser, and application vulnerabilities like Adobe Flash and Oracle Java. Surfing to the wrong page with an exploit can cause havoc for your system; keeping up to date on patches helps ensure that a fake deal does not compromise your device.
DO: Beware of Fake Shopping AppsBeware of fake shopping applications for use on your phones and tablets. Both Google and Apple are removing fake shopping applications that attempt to steal information and present fake advertisements from their app stores. These applications can be difficult to spot but here are a few clues:
- If it is an application from a major retailer and has little to no reviews, it is probably a fake. Most major retailers have applications that have been downloaded thousands of times. New fake ones just do not have the credibility in terms of reviews documented and are a simple clue.
- The developer’s name is in a foreign language or is listed by an individual and not a company.
- The application requests permission to access information on your device like photos, text messages or contacts that it really should not have.
- The application logo uses different colors or is not quite the same as the vendor you are looking for. For example, a Starbucks logo is always green and white. Variations would indicate a fake application trying to mimic the real deal.