The Black Friday shopping period consistently sees a surge in online commercial activity, which is accompanied by an increase in documented cybercriminal operations targeting consumers. Security researchers and consumer protection agencies have identified several recurring tactics used to defraud shoppers. Awareness of these established scams is essential for online safety during the holiday season.

Reports from bodies like the Federal Trade Commission (FTC) and the Better Business Bureau (BBB) highlight specific types of fraud that become prevalent each year. These scams rely on impersonation, deceptive advertising, and social engineering to steal financial information and personal data from victims.

Fraudulent Shipping and Order Confirmation Emails

One of the most common threats documented during the holiday shopping season is the proliferation of phishing emails disguised as official communications from retailers and couriers. Cybercriminals distribute messages that appear to be from major brands like Amazon or shipping companies such as UPS and FedEx. These emails frequently use subject lines related to order confirmations, shipping updates, or delivery problems to create a sense of urgency. The links within these messages direct users to malicious websites designed to harvest login credentials or deploy malware. The FBI’s Internet Crime Complaint Center (IC3) has repeatedly warned consumers about the financial losses associated with these phishing campaigns.

Impersonator Websites and Gift Card Scams

Another prevalent tactic is the creation of fraudulent e-commerce websites that mimic legitimate retailers. Scammers register domain names that are slight misspellings of popular store names and build sites that look professional, often advertising in-demand products at deep discounts. These fake storefronts are designed solely to collect payment information for goods that will never be shipped. The BBB’s Scam Tracker has received numerous reports from consumers who lost money to such sites. A related scam involves fake advertisements on social media platforms that promote these impersonator websites. Additionally, consumers are targeted with fraudulent gift card offers, often through pop-up ads or emails, that promise a free gift card in exchange for completing a survey. These surveys are a pretext to steal sensitive personal information which is then used for identity theft.

Source: https://www.infosecurity-magazine.com/news/three-black-friday-scams-2025/