Fake delivery notices and gift card scams targeting holiday shoppers

Black Friday is still weeks away, but the holiday shopping season is already picking up. Stores are promoting early deals, our inboxes are filling with sales emails, and chances are you’re already thinking about gifts for family and friends. Scammers are getting an early start, too.

Holiday shopping scams are designed to blend in with legitimate promotions and messages. A tempting discount could lead to a fake online store. A delivery alert might ask you to confirm your address or pay a small fee. And an email about a problem with your order could be an attempt to steal your payment information.

The tricky part is that these messages often arrive when you’re already looking for deals or expecting packages. Before you click or enter your credit card information, here are seven holiday shopping scams to watch for and simple ways to protect yourself.

DO NOT CLICK FAKE ‘ACCOUNT RECOVERY’ AMAZON EMAIL

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Our free CyberGuy LIVE class, 5 Ways to Travel Smarter and Save Money, has ended, but you can still watch the full replay. Kurt “CyberGuy” Knutsson walks you through five practical ways to protect your phone and personal information, avoid common travel scams, find better deals, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Watch the free replay, plus a downloadable checklist, now at CyberGuyLive.com.

Why holiday shopping gives scammers an opening

During the holidays, it is normal to receive messages from unfamiliar stores. You may also be expecting several deliveries at once. Meanwhile, sales and shipping deadlines create pressure to act quickly. Scammers take advantage of those distractions. A fake message becomes more convincing when it matches something you are already expecting. That’s why one of the best ways to avoid holiday shopping scams is to verify unexpected messages through a company’s official website or app rather than responding directly.

The deal that’s too good to be true

You see a social media ad for a name-brand coat, popular gadget or designer handbag at 80% off. The photos look professional, and a countdown clock warns that the deal is about to expire. Big discounts happen during the holidays. However, unusually low prices on popular merchandise can signal a scam. Some fake stores collect your payment and send nothing. Others deliver cheap counterfeits or products that look nothing like the advertisement.

How to protect yourself:

• Compare prices at established retailers before placing an order.
• Research unfamiliar sellers by searching the store name alongside words such as “scam,” “complaint” or “review.”
• Watch for artificial urgency created by countdown clocks and claims of limited inventory.
• Avoid buying directly from unfamiliar social media ads. Instead, visit the retailer’s official website.

The Federal Trade Commission warns that scammers frequently use social media advertisements featuring popular products at unusually low prices.

The copycat online store

Fake shopping websites can look remarkably convincing. Scammers copy brand logos, product photography and website layouts to make their stores appear legitimate. Sometimes, the biggest clue is hiding in the website address. A fake store might add words such as “outlet” or “sale” to a familiar brand name. Others use subtle misspellings or unfamiliar web addresses.

Warning signs to check:

• Suspicious website addresses: Look for misspellings, unexpected words or unusual domains.
• Missing contact information: Be cautious if you cannot find a reliable way to reach customer support.
• Unusual payment demands: Avoid sellers requiring gift cards, wire transfers or cryptocurrency.
• Questionable reviews: Look beyond testimonials posted directly on the retailer’s website.
• Unclear return policies: Review refund terms and shipping charges before purchasing.

One important detail: A padlock icon or HTTPS connection does not guarantee that a shopping website is legitimate. It means the connection is encrypted. Scammers can use encrypted websites, too. When in doubt, type the retailer’s official address into your browser or open its trusted app.

The fake delivery notice

“Your package could not be delivered. Please confirm your address.” Messages like this appear through text messages and emails, often claiming to come from the U.S. Postal Service, UPS or FedEx. Because you may have packages on the way, the message can seem believable. Scammers frequently direct you to a fake tracking page. There, they may ask you to enter your address, credit card number or other personal information. Some demand a small redelivery fee.

How to protect yourself:

• Avoid clicking unexpected delivery links in text messages or emails.
• Check tracking information directly through the carrier’s official app or website.
• Use your original order confirmation to locate the legitimate tracking number.
• Report suspicious texts by forwarding them to 7726 (SPAM), if supported by your carrier.

The Postal Service confirms that it does not charge a fee for redelivery. If a text claims you must pay USPS to receive your package again, treat it as a warning sign.

The problem with your order email

Another common scam involves an email claiming that your payment failed, your shopping account has been locked or a purchase needs immediate confirmation. Some messages go further. They claim someone made an expensive purchase using your account and provide a phone number to call if you want to cancel it. That number may connect you directly to a scammer. Once you call, the person may request your credit card information, ask for a one-time verification code or pressure you into installing remote-access software.

How to protect yourself:

• Do not call phone numbers provided in unexpected order or billing alerts.
• Open the retailer’s official app or website and review your purchase history.
• Check your bank or credit card activity if the message mentions an unfamiliar charge.
• Never give someone remote access to your computer because of an unsolicited order notification.

If you cannot verify the message through your account, contact the company’s customer service department using contact information from its official website.

The gift card payment request

Gift cards make convenient holiday presents. Unfortunately, scammers also like them because the money can be difficult to recover once the card numbers and PINs are shared. A scammer may pretend to be a seller, employer or family member who urgently needs financial help. Some even claim to represent government agencies or utility companies.

How to protect yourself:

• Never use gift cards to pay unexpected bills, fees or taxes.
• Verify urgent requests from friends or relatives by contacting them through a number you already know.
• Buy gift cards from reputable retailers and inspect physical cards for signs of tampering.
• Keep your receipt and a copy of the card information in a secure location.

A legitimate company might sell gift cards or accept its own gift cards for purchases. However, demands to buy gift cards and send someone the card numbers or PINs are strong signs of fraud.

The charity appeal that pulls at your heart

The holidays are a popular time for charitable giving. Scammers know that emotional appeals can encourage people to donate quickly. Fake charities may use names that resemble familiar organizations. Others take advantage of natural disasters or heartbreaking stories to solicit donations. Some scammers impersonate legitimate charities and direct donations to fraudulent payment pages.

How to protect yourself:

• Research unfamiliar charities before making donations.
• Visit the charity’s official website rather than following an unexpected link.
• Check charity ratings through independent services such as CharityWatch or the BBB Wise Giving Alliance.
• Avoid pressured donations and requests for payment by gift card, cryptocurrency or wire transfer.

You can also consult the FTC’s charity guidance before donating.

CHEAP ANDROID PHONES FOUND WITH MALWARE ALREADY INSTALLED

Scammers are using fake shipping notifications and order confirmation emails to trick holiday shoppers into revealing personal and financial information. (Photo Illustration by Matt Cardy/Getty Images)

The marketplace bargain that disappears

Online marketplaces and local resale groups can be useful places to find holiday bargains. However, they also attract scammers posing as legitimate sellers. A seller might advertise a popular item at an unusually low price, then demand payment before you can inspect it. Others try to move conversations away from the marketplace to avoid its protections. Fake payment confirmations and requests for additional shipping fees are other warning signs.

How to protect yourself:

• Keep messages and payments on the platform when it provides those services.
• Review seller ratings and account history before buying.
• Avoid paying in advance through unprotected methods such as wire transfers or gift cards.
• Understand the marketplace’s purchase protection rules before completing a transaction.
• Inspect local purchases safely before handing over payment whenever possible.

Remember that not every marketplace provides buyer protection. Check its policies rather than assuming it will refund a fraudulent purchase.

Safer checkout habits for the holiday season

Avoiding holiday shopping scams starts with a few simple habits. These precautions can help protect your finances and personal information.

• Use a credit card when shopping online. Credit cards generally provide stronger legal protections for disputing unauthorized charges and purchases that never arrive.
• Turn on purchase alerts. Your bank or card issuer may let you receive notifications whenever your account is charged.
• Create strong, unique passwords. A password manager can help you avoid reusing credentials across shopping accounts.
• Enable multifactor authentication. Whenever possible, use an authenticator app or passkey for added account security.
• Keep your devices updated. Install current browser, operating system and security updates.
• Never share unexpected verification codes. Scammers can use these codes to break into accounts.
• Save order confirmations. Keep records of your receipts, tracking numbers and communications with sellers.
• Review financial statements. Check for unfamiliar charges throughout the shopping season and into January.

These habits help reduce your risk even when an advertisement or shopping website looks legitimate.

What to do if you clicked a shopping scam

Even careful shoppers can encounter convincing scams. The important thing is to respond based on what actually happened.

If you only opened a suspicious link

• Close the website without entering personal information.
• Avoid downloading files or approving unexpected prompts.
• Update your security software and run a scan if you suspect something malicious was downloaded.

Simply opening a webpage does not automatically mean your accounts have been compromised.

If you entered your password or personal information

• Change the affected password immediately through the legitimate website or app.
• Change any other accounts that use the same password.
• Enable multifactor authentication and review your account for unfamiliar activity.
• Contact your bank or card issuer if you submitted payment information.
• Visit IdentityTheft.gov if you shared sensitive identity information.

If you sent money to a scammer

• Contact your payment provider immediately and ask whether the transaction can be reversed or disputed.
• Report a gift card scam to the company that issued the card. Keep the receipt and card details.
• Report the incident at ReportFraud.ftc.gov.

Acting quickly can improve your chances of limiting the damage.

How security software can help protect holiday shoppers

Good habits are your first line of defense, but nobody spots every scam every time, especially during the busy holiday season. That’s where reliable security software can provide an extra layer of protection. I recommend using strong antivirus software that helps detect suspicious websites, phishing attempts and malicious links before they put your personal information at risk.

Look for software that offers real-time protection against viruses, malware, spyware and ransomware. Some security solutions also include scam detection tools that can help identify fraudulent text messages, fake shopping websites and suspicious links. These features are particularly useful when scammers impersonate familiar retailers or delivery companies.

A built-in password manager is another valuable feature. It can generate and securely store strong, unique passwords for your shopping accounts. That helps reduce the risk of someone accessing multiple accounts if one password is compromised.

AI-powered scams are also becoming more convincing. Fake celebrity endorsements, manipulated videos and fraudulent holiday giveaways can make questionable offers appear legitimate. Some security products now include AI-powered scam detection and deepfake detection tools to help identify certain types of manipulated content. However, these capabilities vary by product, device and platform.

While security software cannot stop every scam, combining it with secure payment methods, account alerts and careful shopping habits can help protect your money and personal information throughout the holiday season.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

SCAMMERS ARE BUYING GOOGLE ADS TO STEAL BANK LOGINS

Cybercriminals are creating convincing retail websites and social media advertisements to lure shoppers with unusually low prices during the holiday season. (Fernando Gutierrez-Juarez/picture alliance via Getty Images)

Kurt’s key takeaways

I love finding a great holiday deal as much as anyone. But I’ve learned that the best way to avoid getting scammed is to be a little skeptical when something looks unusually attractive or demands an immediate response. Scammers are getting better at copying familiar stores and creating convincing messages. They’re also using AI to make fraudulent offers look more believable. That’s why I recommend checking purchases directly through retailers you trust and using security tools that can help flag suspicious activity. A few extra seconds of checking could save you a lot of trouble. The holidays should be about enjoying time with the people you care about, not cleaning up after a scam.

Have you ever received a fake delivery alert or spotted an online shopping deal that turned out to be a scam? What tipped you off? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

CLICK HERE TO DOWNLOAD THE APP

Copyright 2026 CyberGuy.com. All rights reserved.