Attackers are also deploying fake e-commerce sites with AI chatbots

Cybersecurity researchers are urging greater caution as Christmas approaches, warning that seasonal scams are multiplying rapidly. Check Point has recorded over 33,500 festive phishing emails and more than 10,000 deceptive social ads within two weeks.

AI tools are helping criminals craft convincing messages that mirror trusted brands and local languages. Attackers are also deploying fake e-commerce sites with AI chatbots, as well as deepfake audio and scripted calls to strengthen vishing attempts.

Smishing alerts imitating delivery firms are becoming more widespread, with recent months showing a marked rise in fraudulent parcel scams. Victims are often tricked into sharing payment details through links that imitate genuine logistics updates.

Experts say fake shops and giveaway scams remain persistent risks, frequently launched from accounts created within the past three months. Users are being advised to ignore unsolicited links, verify retailers and treat unexpected offers with scepticism.

How to Spot the Red Flags

Spoofed URLs: Look for typos or suspicious domains.

Unusual payment requests: Gift cards, crypto, or bank transfers = scam.

Missing customer support: No phone, no address, only generic email.

New or inactive social accounts: Real giveaways don’t come from blank pages.

Emotional triggers: Messages like “You’ve won a Christmas giveaway!” or “Your parcel is held, pay $xx to avoid delays” are designed to create urgency.

Brand impersonation: Scammers misuse major retailers’ names (e.g., Walmart, Home Depot) to make fake holiday rewards seem legitimate.

Name–address mismatch: If the display name shows a trusted brand but the sender address or link domain is unrelated, it’s almost certainly a scam.

The National Anti-Scam Centre warns that online shopping scams are surging. From fake websites and parcel alerts to phony loyalty rewards, cybercriminals are using increasingly sophisticated tactics to turn festive cheer into financial pain. Australian government data reveals the scale of the problem: $26.25 million in reported scam losses last December alone and nearly $260 million in the first nine months of 2025, underscoring how easily fraudsters can take advantage of distracted consumers.

Despite increased awareness, and that the first nine months of 2025 saw scam reports decline by 20 per cent compared to the same period last year, losses increased by 16 per cent. This trend highlights the growing sophistication of scam techniques, and while Australians may be more alert, the financial impact on victims is greater than ever.

The 10 different types of scam websites

Scam websites come in various forms, each with its own modus operandi. The various categories of scam websites include:

1. Phishing websites

These sites impersonate trusted entities like banks or social media platforms, tricking users into revealing login credentials and personal information.

2. Fake shopping websites and discount landing pages

These platforms promise low prices for products they have no intention of delivering, and some may attempt to steal users' credit card information.

3. Malware distribution websites

Functioning as hubs for harmful software, these sites infect devices with viruses, Trojans, or spyware, leading to a host of issues including data theft.

4. Tech support scams

Scammers pose as tech support agents, aiming to gain remote access to devices or sell unnecessary software or services.

5. Investment scams

These schemes promise high returns on fictitious investment opportunities, ultimately resulting in financial loss for the victims.

6. Charity scams

Scammers pose as legitimate charities, soliciting donations that often never reach their intended recipients.

7. Fake ticket-selling sites

These platforms falsely offer tickets to events or travel at attractive prices, but they rarely deliver the promised tickets.

8. Clone websites

These mimic authentic platforms, aiming to deceive users into providing sensitive information or engaging in fraudulent transactions.

9. Scareware sites

Using fake virus alerts or pop-ups, these sites attempt to persuade users to pay for phony solutions or services.

10. Scam contest websites

These sites lure users with fake contests, often requiring an upfront fee or personal information for entry. Winners rarely receive the promised prizes.

By - Aaradhay Sharma