FBI warns email users as holiday scams surge

Holiday buying creates a cleanable tempest for cybercriminals. 

The FBI says scammers people Gmail, Outlook and astir each different inbox this clip of twelvemonth arsenic they propulsion fake messages that instrumentality you into giving up wealth oregon delicate information.

These schemes determination fast, and victims often bash not recognize what happened until their slope accounts amusement charges they ne'er made.

Sign up for my FREE CyberGuy Report
Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox. Plus, you’ll get instant entree to my Ultimate Scam Survival Guide — escaped erstwhile you articulation my CYBERGUY.COM newsletter.

NEW SCAM SENDS FAKE MICROSOFT 365 LOGIN PAGES

Scammers usage realistic emails during the vacation rush, truthful adjacent mean inbox alerts tin fell unsafe threats. (Kurt "CyberGuy" Knutsson)

Why the FBI is raising the alarm

The FBI's Internet Crime Complaint Center notes that Americans suffer much than $785 cardinal to non-payment and non-delivery scams during the vacation rhythm and the months that follow. Credit paper fraud pushed losses higher by different $199 million. Complaints usually surge successful the aboriginal months of the year, which the IC3 ties to vacation enactment that happens successful November and December.

The bureau highlights 4 large schemes that spike during the season. They see non-delivery scams wherever you wage for items that ne'er arrive, non-payment scams, wherever sellers get thing aft shipping items, auction fraud wherever the merchandise is not what the listing claimed and acquisition paper fraud, wherever criminals propulsion victims to wage with prepaid cards.

The FBI says 1 click connected a suspicious nexus tin instal malware. That malware tin seizure your name, password and slope relationship number. Criminals usage that accusation to interruption into accounts faster than astir radical expect.

NEW EMAIL SCAM USES HIDDEN CHARACTERS TO SLIP PAST FILTERS

Watching for informing signs and slowing down earlier clicking helps support your wealth and your accounts. (Kurt "CyberGuy" Knutsson)

A increasing occupation with relationship takeover scams

The bureau is besides tracking a crisp emergence successful relationship takeover attacks. Since January 2025, IC3 has received much than 5,100 complaints tied to these scams with reported losses of implicit $262 million.

These attacks commencement with societal engineering. Criminals impersonate slope workers, lawsuit work unit oregon fraud teams. They nonstop fake emails, texts, oregon calls that assertion your relationship has a problem. Victims past look unit to stock login credentials, multi-factor authentication codes oregon one-time passcodes.

Criminals besides make phishing sites that look similar existent banking oregon payroll portals. Some adjacent bargain hunt ads truthful the fake sites look astatine the apical of the results. Once a unfortunate enters their information, scammers log in, fastener retired the existent proprietor and determination money. Many transfers spell done cryptocurrency wallets to fell the trail.

Criminals plan phishing messages to look urgent, pushing radical to enactment accelerated and springiness up delicate information. (Kurt "CyberGuy" Knutsson)

How to enactment harmless from vacation email scams

You tin little your hazard with a fewer elemental habits.

1) Be cautious with links and attachments

Avoid opening links oregon files successful emails, websites oregon societal media posts you did not expect. Also, usage beardown antivirus bundle to drawback malware if you accidentally click connected thing unsafe.

The champion mode to safeguard yourself from malicious links that instal malware, perchance accessing your backstage information, is to person beardown antivirus bundle installed connected each your devices. This extortion tin besides alert you to phishing emails and ransomware scams, keeping your idiosyncratic accusation and integer assets safe.

Get my picks for the champion 2025 antivirus extortion winners for your Windows, Mac, Android and iOS devices astatine Cyberguy.com.

2) Look up companies connected your own

If a connection asks you to update your password oregon relationship information, find the company's telephone fig yourself and telephone to verify it.

3) Watch for unit tactics

Scammers make a consciousness of urgency. Slow down and corroborate what you are being told.

4) Limit what scammers tin find astir you online

Use a information removal work to propulsion your idiosyncratic accusation disconnected information broker sites. These services scan dozens of brokers that people your telephone number, location address, email and adjacent buying habits. When little of your information is exposed, scammers person less details to usage erstwhile crafting convincing phishing emails oregon impersonating trusted companies. This makes it harder for criminals to people you with personalized attacks during the vacation buying rush.

While nary work tin warrant the implicit removal of your information from the internet, a information removal work is truly a astute choice. They aren't cheap, and neither is your privacy. These services bash each the enactment for you by actively monitoring and systematically erasing your idiosyncratic accusation from hundreds of websites. It's what gives maine bid of caput and has proven to beryllium the astir effectual mode to erase your idiosyncratic information from the internet. By limiting the accusation available, you trim the hazard of scammers cross-referencing information from breaches with accusation they mightiness find connected the acheronian web, making it harder for them to people you.

Check retired my apical picks for information removal services and get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web by visiting Cyberguy.com.

Get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web: Cyberguy.com.

5) Limit what scammers tin find astir you online

Use a information removal work to propulsion your accusation disconnected information broker sites. This reduces the idiosyncratic details criminals usage to trade convincing phishing messages.

6) Check the website code earlier signing in

Look for unusual spellings oregon domains that look retired of place. Banks ne'er nonstop sign-in links that redirect done unfamiliar sites.

7) Protect your accounts

Enable two-factor authentication (2FA), debar reusing passwords, and update your passwords arsenic soon arsenic you perceive astir a caller scam oregon information leak that could impact you. Consider utilizing a password manager, which securely stores and generates analyzable passwords, reducing the hazard of password reuse.

Next, spot if your email has been exposed successful past breaches. Our No. 1 password manager prime includes a built-in breach scanner that checks whether your email code oregon passwords person appeared successful known leaks. If you observe a match, instantly alteration immoderate reused passwords and unafraid those accounts with new, unsocial credentials.

Check retired the champion expert-reviewed password managers of 2025 at Cyberguy.com.

8) Use email aliases to support your main inbox

Create alias email addresses for buying and sign-ups. These aliases guardant messages to your superior inbox and assistance trim spam. They besides bounds however overmuch of your existent accusation scammers tin entree if a retailer oregon website faces a breach.

9) Act accelerated if wealth is stolen

The FBI says victims should interaction their fiscal instauration arsenic soon arsenic they announcement fraud. Request a callback oregon reversal and inquire for a Hold Harmless Letter oregon Letter of Indemnity. Then reset each credential connected to the exposed password, including immoderate relationship that uses the aforesaid login.

​​For recommendations connected backstage and unafraid email providers that connection alias addresses, visit Cyberguy.com.

10) Report scams close away

The FBI urges victims to study fraudulent enactment to the Internet Crime Complaint Center (IC3.gov). Quick reporting helps investigators way caller scam patterns and whitethorn amended betterment chances.

Kurt's Key takeaways

Cybercriminals number connected distraction during the vacation rush. Staying alert helps support your inbox, wealth and idiosyncratic accusation safer. Awareness is your strongest tool, and adjacent tiny steps marque a large quality erstwhile scams turn much precocious each year.

What scams person you seen deed your inbox this season, and however did you grip them? Let america cognize by penning to america astatine Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 
Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox. Plus, you’ll get instant entree to my Ultimate Scam Survival Guide — escaped erstwhile you articulation my CYBERGUY.COM newsletter. 

Copyright 2025 CyberGuy.com. All rights reserved.