With Black Friday approaching, shoppers are preparing for some of the biggest online sales of the year. But while seasonal discounts offer opportunities to save money, they also give scammers new ways to trick shoppers with fake deals, fraudulent websites, and phishing messages.
However, with online shopping comes the threat of online shopping scams, and, on Black Friday, digital consumers are at a higher risk than usual. From January through October 2025, Kaspersky identified nearly 6.4 million phishing attacks targeting users of online stores, payment systems and banks, with 48.2% of them aimed at online shoppers, according to Kaspersky's 2025 online shopping threat report. Luckily, our team of cybersecurity experts has put together this guide to shopping online safely and securely in the run-up to Black Friday this year.
- Black Friday scams commonly involve phishing messages, fake shopping websites, fraudulent deals, and impersonation of trusted retailers.
- Scammers also target gamers with fake promotions, malicious downloads, and phishing attempts involving popular gaming platforms.
- To shop safely, verify retailers and website addresses, avoid suspicious links, use unique passwords, and choose secure payment methods.
- If you suspect a scam, contact your bank or payment provider immediately, secure affected accounts, and report the incident.
Staying Safe from Black Friday Online Threats
The best way to stay secure when you’re shopping online this holiday season is by knowing what cyberthreats are out there and some of the telltale signs that you’re in danger of falling victim for them when shopping online. So, to make sure you don’t get caught out by any holiday attackers, we’ve listed all potential online threats in detail below.
Black Friday Phishing Scams
A consistently popular technique used by cybercriminals all over the world, phishing, (often referred to as a phishing scam), is a cybercrime that all digital consumers should be on the lookout for in the lead-up to Black Friday (and all year round). As phishing techniques have become more sophisticated, cybersecurity experts have noticed an equal rise in the number of scams that require the user to input their personal data via a link to a fraudulent website (often disguised to look like a large retailer’s official webpage) so that an online scammer can steal your information for identity fraud or steal your credit card data. The most common Black Friday Phishing scams to watch out for consist of:
Amazon was among the most frequently impersonated shopping brands in 2025. Between January and October, Kaspersky blocked 606,369 phishing attempts misusing Amazon's brand, alongside attacks impersonating Alibaba, eBay, Walmart, and Mercado Libre, according to Kaspersky's 2025 online shopping threat report. Scammers are also using AI to create more convincing and targeted phishing messages, making fraudulent offers harder to recognize.
Fake Order Phishing
As the name suggests, this type of threat involves the phisher sending you (by text or by email) a fake notification saying that there has been a problem with your order (even when you haven’t ordered anything). These messages usually require you to click on a link to a fake website where you will be prompted to enter sensitive information for “confirmation” but your data will be collected by the attacker.
The same technique is used with online order confirmation forms and notifications. In some cases, you might even receive a fake confirmation message via phone, text, or email. In all cases, you will be informed that you’ve been charged the incorrect amount and that you should follow a link or go to a certain website to “cancel” your order. But when you call/click on the link, a fraudulent website, or phishers will attempt to collect your credentials or sensitive information. The scammers also can send you fake notification about problem with delivery of your package.
In rare cases, you may be asked to download an attachment from a phishing email and return it with your information to fulfill the cancellation. Beware, not only is the form fake, but the downloaded file may also contain other forms of malware that could infect your system.
Website spoofing
Scammers use a technique known as website spoofing to create fraudulent websites that imitate legitimate online stores. These fake websites are designed to trick shoppers into sharing personal information, payment details, or login credentials.
These fake websites may look remarkably similar to their genuine counterparts, with very subtle differences in both the design and the URL structure.
In holiday rush or in sales period, these subtle differences often are missed. But such carelessness can cost the user the loss of his personal data and financial resources.
Remember, if you've unknowingly made an online purchase from a fake website, you are a victim of financial fraud. You should immediately report it to your bank and file a complaint with the relevant supervisory authorities.
Fake Charity
Equally, cybercriminals have been known to take advantage of the season of giving by creating fake websites and social media campaigns under the guise of a charitable organization. In some cases, these fake organizations may even try to contact you directly in the form of a spam email or text message asking for “donations” to be sent digitally, so be careful to research your chosen charity thoroughly before you transfer any money.
Black Friday Gaming Scams
Gamers have become a target for cybercriminals. Between January and October 2025, Kaspersky recorded more than 20 million attempted attacks involving files disguised as gaming platforms, including over 18 million involving Discord, a more than 14-fold increase compared to 2024. The same report identified 2,054,336 phishing attempts impersonating gaming platforms such as Steam, PlayStation, and Xbox, often using fake discounts, giveaways, and limited-time offers to steal account credentials or payment details.
How to Shop Safely Online this Black Friday
Even knowing the above threats and scams may not be enough to stop today’s sophisticated scammers and cybercriminals from trying to lure you into paying or disclosing personal details during the days (or weeks) leading up to Black Friday - which is why we’ve put together a handy list of things you can do to avoid getting deceived this year:
Buy from Trusted Retailers Only
This may sound simple but, in practice, buying from respected and known online stores can be a little tricky when you’re shopping around for the best deals. Cybercrime experts recommend that you always Google the website first to see if it’s been reported online already as a scam site, followed by some research into who the brand is and where their stores/head office are/is based. You can do the same thing for the product itself:
Simply search online for “brand + scam” or “product name + scam” in your browser of choice.
Another good advice is to use “WHOIS” services, which can show the creation date of the domain: if the creation date was about a few weeks ago, it can be a sign of fraud website so you need to pay extra attention to it.
Equally, you should always take the time to read the reviews of the products posted on the website where you’re shopping. Consistently highly rated short descriptions are a warning sign when looking through a product’s reviews.
According to a Kaspersky survey published in January 2026, 65% of online shoppers believe they can recognize fraud independently, but only 42% use security software to protect their online payments. Among shoppers aged 55 and older, that figure drops to 32%. Security software can provide additional protection: Kaspersky Premium received an "Approved" certification in AV-Comparatives' 2025 Fake-Shops Detection test for its ability to identify fraudulent online stores.
Independently tested and awarded by the industry's leading labs.
Be Aware of the Website Itself
Even though you may be in a hurry to get the best deal first, slow down and take a look at the website itself. See if any of the colors are slightly different from how you may have seen the website before and check for any spelling mistakes or strange formatting errors in the text of the webpage, or the URL itself.
Check whether the website uses HTTPS and has a valid SSL certificate, which helps encrypt information exchanged between your browser and the site. However, HTTPS alone does not mean a store is legitimate. Scammers can also use encrypted websites, so always verify the retailer's URL, contact information, and reputation before making a purchase
Finally, one big warning sign that you’re using a fake/scammer’s website is that the company itself does not have any physical address listed on the website or real contact details.
Never Click Unfamiliar Links in Emails, Text Messages and Notifications
This may sound obvious, but with phishing and scams becoming more and more sophisticated, it’s imperative that you do not click on any unfamiliar links or download any suspicious-looking attachments embedded in emails, links, or notifications on any of your devices. Around Black Friday, look out for any unusual-looking links directing you to go to delivery websites or asking you to resolve a problem with your order; these will most likely be cybercriminals.
Use a Password Manager or Vault
Using a password manager helps protect your online shopping accounts by generating and securely storing long, unique passwords. Kaspersky Password Manager can also fill in your login credentials, reducing the need to remember multiple passwords. For additional protection, enable multi-factor authentication wherever available.
Use a Respected VPN
If you're shopping on public Wi-Fi, a reputable VPN can provide an additional layer of privacy by encrypting internet traffic between your device and the VPN server. This helps protect your connection on untrusted networks, but it cannot prevent every cyberthreat or guarantee that an online store is legitimate. Always verify retailers and avoid suspicious links, even when using a VPN.
Use a Virtual Card instead of a Debit Card
Virtual cards offer enhanced security for online shopping compared to physical cards. Since the virtual card details are different from the user’s physical card, the risk of fraud is reduced. Virtual cards can also be disabled or deleted, and they may have transaction limits.
What to do if you get Scammed or phished this Black Friday?
If you do get scammed or phished this Black Friday, then the first thing to do is not panic. Simply follow the below steps to avoid serious personal and/or financial damage:
• Cancel your credit or debit card immediately and contact your bank to let them know that they should block future transactions with this card.
• Enact a credit lock to freeze your credit.
• If possible, cancel any pending payments that haven’t left your account yet.
• Change your usernames and passwords immediately so that no further damage can be done with your identifying data.
• Perform an antivirus check on your computer to see if there is any lingering malware that has found its way onto your system. We recommend using our dedicated security software Kaspersky Premium, which provides multilayered protection against malware and other cyberthreats, along with regular security updates.
Follow the above tips and advice to stay safe online. Happy Holidays!
Related Articles:
- What are the best safe online shopping tips for Black Friday?
- How can I ensure safe online shopping during sales events?
- How can you identify scam websites when shopping online?
- How to spot fake login pages before entering your credentials?
Recommended products:
FAQs
How early before Black Friday do scams usually start?
Black Friday scams can begin weeks before the event, as retailers launch early promotions. Fake discounts, phishing emails, and fraudulent shopping websites may appear throughout the sales season, so shoppers should remain cautious well before Black Friday itself.
Can scammers reach me through a QR code during Black Friday sales?
Yes. Scammers can use fraudulent QR codes in promotional emails, advertisements, or printed materials to direct shoppers to phishing websites. Always check the destination URL before entering login credentials, personal information, or payment details.
Is Cyber Monday just as risky as Black Friday?
Cyber Monday carries similar types of online shopping risks, including fake deals, phishing emails, and fraudulent websites. Scammers can exploit both events, so shoppers should apply the same security precautions throughout the Black Friday and Cyber Monday sales period.
Does having security software guarantee I won't get scammed on Black Friday?
No. Security software can help detect phishing websites, malicious links, and fraudulent online stores, but it cannot prevent every scam. Combine reliable security software with safe shopping habits, such as verifying retailers and avoiding suspicious offers.
