Smart, Secure Online Shopping
Protect yourself from cyber scams this holiday season
Despite inflation, Americans will spend around $255 billion shopping online this holiday season. As we hunt for bargains, we may stray outside our favorite online stores. IMU Fiber shares tips from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) for keeping your bank account - and even your identity - safe. Learn more at cisa.gov/shop-safely
CHECK YOUR DEVICES
Before making any online purchases, make sure the device you’re using to shop online is up-to-date. Next, take a look at your accounts and ask, do they each have strong passwords? If two-factor authentication is available for logging into devices and accounts, are you using it?
Protect your devices by keeping software up-to-date. These include items like mobile phones, computers, and tablets; also appliances, electronics, and children’s toys. Once you’ve purchased an internet connected device, change the default password and use different and complex passwords for each device. Consider using a password manager to help.
Check the device’s privacy and security settings to make sure you understand how your information will be used and stored. Also make sure you’re not sharing more information than you want or need to provide.
Enable automatic software updates where applicable, as running the latest version of software helps ensure the manufacturers are still supporting it and providing the latest patches for vulnerabilities.
SHOP WITH TRUSTED SOURCES
Think about how you search online. Are you searching from home, on public Wi-Fi? How are you finding the deals? Are you clicking on links in emails? Going to trusted vendors? Clicking on ads on webpages? You wouldn’t go into a store with boarded up windows and without signage: the same rules apply online. If it looks suspicious, trust your gut. Better safe than sorry.
Before providing any personal or financial information, make sure you’re interacting with a reputable, established vendor. Some attackers may try to trick you by creating malicious websites that appear to be legitimate. Always verify the legitimacy of a website before giving information. If you’ve never heard of it before, think twice.
DON’T connect to unsecure public Wi-Fi, especially for banking, shopping, or other secure actions.
Make sure your information is being encrypted. Websites should use a secure sockets layer (SSL) to encrypt information. Look for a URL that begins with “https:” and a padlock icon. If the padlock is closed, the information is encrypted.
Most of us receive emails from retailers about special offers during the holidays. Cyber criminals send phishing emails—designed to look like they’re from retailers—that have malicious links or that ask for you to input your personal or financial information. Don’t click links or download attachments unless you’re confident where they came from. If you’re unsure if an email is legitimate, type the URL of the retailer or other company into your web browser as opposed to clicking the link.
Never give your password, personal, or financial information in response to an unsolicited email. Legitimate businesses will not email you asking for this information. If you receive a suspicious email that you think may be a phishing scam, please report it:
us-cert.gov/report-phishing.
USE SAFE METHODS FOR PURCHASES
Not all payment methods are created equal. Debit cards are the most vulnerable way to shop online, but there are more secure options. If you can, use a credit card or online payment service, as opposed to a debit card. There are laws to limit your liability for fraudulent credit card charges, but you may not have the same level of protection for your debit cards. Additionally, because a debit card draws money directly from your bank account, unauthorized charges could leave you with insufficient funds to pay other bills. Online payment services like PayPal will also protect your information because they create a secure layer between your data and the online merchant.
Check your credit card and bank statements for unusual charges. Immediately notify your bank or financial institution and local law enforcement.
If you believe your personal or financial information has been stolen, report it right away to your local police and the Federal Trade Commission (FTC). Learn how on the FTC website, identitytheft.gov.
Change your passwords, use complex passwords, and use a different one for each account. A password manager can help you do this. If you’re going to make that purchase, what information are you handing over? Before providing personal or financial information, check the website’s privacy policy. Make sure you understand how your information will be stored and used.