How to avoid online scams when shopping online

As online scams become increasingly sophisticated, it's more important than ever to prioritise your online security. With online shopping and online transactions now a part of our daily life, cybercriminals are constantly developing new ways to target consumers through phishing scams, scam emails and online fraud. Understanding the most common types of online scams, how to recognise a phishing email, and what steps to take if you think you’ve been scammed online can help you stay safe.

As technology continues to evolve, so do the tactics used by fraudsters to steal personal and financial information. That's why staying informed and taking simple precautions can help you shop online with greater confidence and avoid online shopping scams.

As part of our ongoing commitment to helping customers stay safe online, we've partnered with CyberScout to share proactive and preventative advice on how to avoid online scams and protect yourself while shopping online.

1. How to avoid online shopping scams

Staying vigilant while shopping online can help reduce the risk of you falling victim to identity theft and fraud. Before clicking a link, check where it leads to by hovering over the URL and verifying it's taking you to a legitimate retailer. Many online shopping scams rely on spoofed links and fake checkout pages to harvest data.

Be wary of unfamiliar websites and avoid entering personal or payment details if anything looks suspicious. If an offer appears too good to be true, it often is; these are common hallmarks of online scams and online fraud.

2. Be cautious of hard-to-find deals

Cybercriminals often use highly sought-after products or limited time offers to entice shoppers. These scams frequently appear on online marketplaces and social media platforms, where fraudsters can take payment without delivering the promised item. Such online shopping scams are among the most common types of online scams during peak seasons such as Christmas.

Before making a purchase, research the seller carefully. Look for a proven trading history, genuine customer reviews and established ratings.

3. How to spot phishing scams and scam emails

Phishing scams are one of the most common forms of online fraud. Fraudsters often send scam emails and text messages pretending to be well-known retailers, delivery companies or service providers. Recognise a phishing email by checking for poor spelling, generic greetings, mismatched sender addresses, unexpected attachments and urgent requests to “verify” information.

If you receive an unexpected message about a delivery, payment or account update, avoid clicking any links or calling telephone numbers included in the message. Instead, contact the retailer or delivery company directly using trusted contact details to verify whether the communication is genuine. Remember that phishing scams and scam emails often spoof logos and domains by mimicking the appearance of recognisable household names to appear legitimate.

4. Watch out for fake charity appeals

Scammers sometimes take advantage of people's generosity, particularly during busy shopping periods and festive seasons. Fraudsters may promote fake charities or organisations that sound legitimate but are designed to collect donations fraudulently. These online scams can spread quickly through social posts and scam emails.

Only donate to established charities and organisations you know and trust. Taking a few moments to verify a charity can help you prevent yourself becoming a victim of online fraud.

5. Review offers carefully

Many businesses promote loyalty rewards, exclusive discounts and seasonal offers throughout the year. Criminals often exploit these promotions by creating convincing copies of legitimate marketing emails. This is a common tactic in online scams and phishing scams.

If an offer seems unusually generous or urgent, take time to research it independently. A quick online search can often reveal whether others have reported it as a scam.

6. Protect yourself with secure online payments

Even when a seller appears legitimate, things can sometimes go wrong. To improve your online security, choose secure payment methods that offer consumer protection. Using protected payment platforms reduces exposure to online shopping scams.

Avoid sending money via bank transfer, cheque or payment apps unless you know and trust the recipient personally. Using secure payment options can help safeguard your finances if an issue arises with online scams or online fraud.

7. Monitor your accounts and personal information

Protecting yourself from online scams doesn't end once your purchase is complete. Regularly review your bank accounts, credit card statements and credit reports for unusual activity. This is essential online security hygiene and helps detect phishing scams that may have compromised data.

Spotting suspicious transactions early can help minimise the impact of fraud and reduce the risk of identity theft.

8. Strengthen your online security habits

While online scams often increase during busy shopping periods, cyber threats exist throughout the year. Adopting strong online security habits can help protect your personal information long-term. These steps help defend against online shopping scams, scam emails and other online fraud.

• Using strong, unique passwords
• Keeping software and devices up to date
• Avoiding unknown links and attachments
• Enabling additional security features where available

What to do if you think you’ve been scammed online

If you suspect you’ve fallen victim to online scams or phishing scams, act quickly. Contact your bank or card provider immediately to freeze or monitor your accounts, change passwords for any affected services, and enable multi-factor authentication. Report scam emails by forwarding them to your email provider and to relevant national reporting services. If you entered credentials, reset them and check for unauthorised logins. Keep records of communications and transactions related to the incident and consider placing a fraud alert or credit freeze on your credit file. In the UK, this can be done through Cifas Protective Registration, which places a warning flag against your details and prompts participating lenders to carry out additional identity checks before approving credit applications.

Stay safe from online scams

By remaining vigilant and following good online security practices, you can reduce your exposure to online scams and shop online with greater confidence. Together with CyberScout, we're committed to helping customers stay protected from cyber threats and online fraud. 

Expert support when you need it

Want advice on preventing a cyber incident? Looking for reassurance about a suspicious call, email or text message? Need support following a cyber attack?

NFU Mutual Bespoke Home Insurance customers can access the Bespoke Cyber Assistance Helpline, administered by CyberScout. The service provides advice, guidance and access to cyber security and fraud specialists.

You'll have access to support 24 hours a day, 363 days a year*.

Helpline: 0800 138 8211

*Closed on Christmas Day and New Year’s Day.