Holiday Shopping Scams: How to Spot Fake Stores, Delivery Texts, and Gift Card Fraud

It's 9:14 on a Tuesday night in December. Your phone buzzes: "Your parcel is on hold. A small customs fee is required to release it." There's a link. You did order three things this week. Maybe four. You tap it before you think.

That moment, tired and distracted in the middle of the holidays, is exactly what scammers plan around. Fraud reports climb every year between early November and the first weeks of January, and the patterns repeat: fake storefronts, fake delivery notices, and requests for gift cards. None of it is clever. It simply arrives when we're least likely to check.

Why the season works in their favour

Three things change in November. You shop at unfamiliar stores, because the thing your nephew wants is sold out everywhere else. You receive more parcels than usual, so a delivery message doesn't surprise you. And you're buying for other people, which means you may not notice a missing item for weeks, or care enough to chase a refund.

Add genuine sale fatigue. When every inbox is full of discount codes, one more "70% off today only" email barely registers as unusual.

Fake stores: when the deal is the trap

A convincing fake shop takes an afternoon to build. It copies a brand's logo and product photos, prices everything just below what everyone else charges, and buys social media ads that disappear once complaints start. The website looks fine on a phone, which is where most of us shop.

What it can't fake is the boring paperwork. That's where to look.

Six checks before you enter card details

• The URL, not the logo. Read the address bar character by character. "brand-outlet-sale.com" is not "brand.com", and a hyphen or an extra word is often the whole scam.
• Payment options. If the only way to pay is a bank transfer, a wire, cryptocurrency, or a gift card, walk away. Card payments and established payment services give you a dispute process. Transfers rarely do.
• Contact details. A real shop has a phone number or a postal address you can find outside its own site. A contact form alone proves nothing.
• The reviews. Testimonials hosted on the seller's page are written by the seller. Search the domain name plus the word "scam" and see what comes up on independent sites.
• Stock phrases. Countdown timers, "only 2 left", and pop-ups telling you someone in Leeds just bought this item are pressure tools, not inventory data.
• The price itself. A deep discount on a product that is almost never discounted is a warning, not a bargain.

One habit covers a lot of ground: search for the brand, then navigate to its site yourself instead of clicking an ad. Ads are rented space, and anyone can rent it.

Delivery texts and parcel phishing

Couriers send a lot of messages in December, which is why fake ones blend in so well. The usual script involves a parcel that can't be delivered, a small fee, or a rescheduling link. Sometimes it's a customs charge. Sometimes it's a "address confirmation" form that asks for your card details.

Reputable carriers do not collect payment by text message. If you're unsure, don't click. Open a browser, type the carrier's address yourself, and enter the tracking number from the order confirmation the merchant sent you. If the parcel is genuinely stuck, the real tracking page will say so.

Watch for the tells: a generic greeting, a link that doesn't match the carrier's domain, and a tiny fee designed to feel too small to worry about.

A close cousin is the fake renewal notice, an email claiming a subscription you don't remember will be charged unless you call a number. Anyone who answers will be talked into installing remote access software or "refunding" money that never existed. Never call a number from a message you didn't expect. Find the company's real support line yourself.

Gift card fraud: the payment that can't be undone

Gift cards are popular with scammers for one reason: the moment you read out a code, the balance is effectively gone, and recovery is rare. There is no chargeback, no dispute, and often nobody who can tell you where the money went.

Three versions show up every winter.

• The urgent request. An email or message that appears to be from your boss, a colleague, a utility company, or the police, asking you to buy gift cards and send photos of the backs. No legitimate organisation asks to be paid this way. None.
• The compromised card. Cards sitting on open racks can be opened, photographed, resealed, and drained before you buy them. Prefer cards kept behind a counter or in a locked case, and check the packaging for scratches, peeling edges, or a PIN panel that looks disturbed. Keep the receipt.
• The "helpful" stranger. Someone offers to buy the cards from you at a discount, or asks you to check a balance for them. Both end the same way.

If you have already shared a code, contact the card issuer straight away and report it, but be realistic. Your best protection is refusing the request in the first place.

Sellers on marketplaces and social media

Classified listings and social posts are a different problem, because the platform isn't the seller. Common tactics include stock photos, a seller who won't meet in person, a request for a deposit before you've seen anything, and a fake "payment confirmation" email that claims the platform is holding your money.

Then there's the overpayment trick. A buyer sends a cheque for more than the agreed price and asks you to return the difference. The cheque bounces days later and the difference is long gone. Never refund money until your bank confirms the funds have genuinely settled, and ask them rather than assuming.

For local sales, meet in daylight in a public place, take cash, and don't ship an item until the payment has truly cleared.

If something goes wrong

1. Call your bank or card issuer immediately using the number on the back of the card, not a number from any message.
2. If you entered login details, change that password, turn on two-factor authentication, and change it anywhere else you reused it.
3. Report the listing, seller, or message to the platform, and the fake delivery text to the carrier it impersonates.
4. Report it to your national fraud or consumer protection body as well. Reports that seem pointless individually build the picture that gets sites taken down.
5. Keep everything: screenshots, texts, emails, order numbers, receipts.
6. Tell the people around you, especially relatives who shop online less often. A five-minute conversation is better prevention than most software.

Shop with a little friction

The scams above all depend on speed. So build in one small delay at the payment step. Use a credit card or a payment service with buyer protection for online purchases, keep one card for online shopping so unusual charges stand out, and let the delivery text sit until morning. A real parcel will still be there.

And if a significant amount of money has already left your account, treat it as a financial decision rather than a technical one. Your bank's fraud team, and where the sums are large a qualified adviser, will give you a clearer answer than any forum thread.

Photo: Kindel Media / Pexels