National Cybersecurity Center
Immediate Action Alert

Fake Holiday Shopping Websites


Cybercriminals have created over 18,000 fake websites using terms like ‘Christmas,’ ‘Black Friday,’ and ‘Flash Sale’ to trick shoppers into providing personal and payment information.

Who Is At Risk
Online shoppers looking for holiday deals.

What To Watch For
Websites with URLs that slightly misspell popular retailer names or have unusual domain endings. For example “PayPa1.com instead of “PayPal.com”, or “TiffanyCoShop.com” instead of the real one “Tiffany.com”. Another one identified is “rnicrosoft.com” and not “microsoft.com”

What to Do
Verify the legitimacy of a website before making a purchase by checking for secure connections (https://), reading reviews, and ensuring the URL matches the official retailer’s site.

Alert Domain
Shopping & Consumer

Stay Protected

Sign up for free alerts and get connected to your Personal Cyber Advisor today.