Diwali is one of the busiest shopping periods of the year in India. However, the surge in digital conduct also opens avenues to manipulate unwitting shoppers by cybercrime actors. Shoppers may encounter a variety of threats, such as fake websites, phishing messages, payment fraud, and malicious applications.
1. Fake Shopping Websites and Fraudulent Advertisements
A popular type of threat with its online shopping platform is making fake e-commerce websites that mimic popular platforms and brands. The sites are marketed on social media, via emails, search engine results, and messaging applications, and often advertise products at an “abnormally discounted price” to help customers rush into the purchase.
When you are shopping on a site, check the URL and spelling, and check for verification on payments, such as the presence of “https” at the start of the URL. Don’t click on links to promote shopping sites that you don’t know and don’t install applications other than the official ones. Unbelievable discounts are always a bad sign.
2. Phishing Emails, SMS and WhatsApp Messages
During the holiday seasons in particular, phishing scams in which attackers attempt to obtain credit card numbers and/or banking and financial details are common. Shoppers might get messages that say their shopping account was blocked, a payment failed, or they’ve gotten a special discount for a short time only. These messages tend to be urgent.
Links can also lead to fake login screens where users must enter their ID and passwords, banking credentials, and one-time passwords (OTPs) to log in to the system.
Consumers should not click any links that they do not expect, and should check any promotion notifications directly on the official apps for the shopping in question. OTPs, passwords, and card security codes should never be shared with anyone.
3. UPI and QR Code Payment Scams
As digital payment has become commonplace in India, cybercriminals are also making use of it with Unified Payments Interface (UPI) payment transactions. QR codes or UPI collect messages can be used for fraud and may appear under various pretenses such as cashback offers, promos, or refunds.
One mistake that is commonly made is that they think if they scan a QR code or enter the UPI PIN, they must receive money. It’s true — entering a UPI PIN entails authorization for payment from the user’s account.
Always double-check the name and amount of the transaction before confirming a payment. Never enter a UPI PIN for repayment or cashback offers, and also don’t accept any type of on-stage payment requests. Any refund must be given through official merchants and/or payment platforms.
4. Fake Delivery Notifications and Customer-Care Scams
With online orders surging during Diwali, there are opportunities for delivery-related fraud also! Phishing messages can be used to trick consumers into responding to messages that appear to be from someone who has promised to deliver something that is delayed, needs correcting to their address, or needs to pay an extra charge for delivery.
These links may contain malicious programs and/or trick you into visiting fraudulent sites. In the same way, a cybercriminal could pretend to be from the customer-care team and help customers with a failed transaction, refunds, or missing orders. They can ask for sensitive details or even persuade users to download apps that permit remote control access. Monitor deliveries via official applications and websites of couriers.
5. Malicious Shopping Applications and Unsecured Networks
Shopping app scams, discount applications, and festive giveaway apps may lead to consumers being subjected to malware and data theft. Unnecessary permissions are asked in some applications to access contacts, messages, files, or other sensitive information.
Install only from trusted app stores and check the authenticity of the developer. Check the permissions of the app and don’t download APK files from unknown sources. Ensure devices, browsers, and security software are kept up to date, and make payments via trusted internet connections.
Making Diwali Shopping Safer
Cybersecurity awareness is very important during the holiday season. Customers should make sure that online sites are secured, monitored closely at payment requests, safeguard personal information and be cautious of deals that are too good to be true.
In case a financial cyber fraud is committed in this manner, the customer must contact the bank or payment service provider as soon as possible and report the incident either on the National Cyber Crime Reporting Portal or to the financial cybercrime helpline (1930) of India.
