Last updated: 21 November 2022
First published: 17 November 2021
This week, a phishing email might urge you to click on a link under time pressure to secure a “Once in a lifetime” shopping deal.
Recent Black Friday and Cyber Monday scams - for example, a fake Louis Vuitton website - have been published by the cyber security company BitDefender here.
Here are a few tips the LSE Cyber Security team have to prevent you from being scammed:
- Always be cautious if you receive an email or SMS text message
- Google the shop to double check if the deal is real
- Scammers can create fake websites with slightly different URLs hoping you won’t notice – rather than clicking on a link in a text/email, search for the retailer on a trusted browser
- Read reviews of the product or service you’re purchasing online
- Buy from reputable retailers so that you know you’re not being scammed
- Beware of third-party sellers – check the product description for “sold by and shipped by”
- Only input payment details on secure websites, look for a padlock sign in front of the URL
- Don’t make purchases on public Wi-Fi, which is often unsecured and unencrypted. If you must use Wi-Fi, at least turn on VPN from a reputable service to obscure your traffic
- Use credit rather than debit cards when shopping so it’s easier to dispute fraudulent transactions
- Decline to save card payment details on a website – this can help protect you if that retailer ever suffers from a data breach compromising consumer payment data
- Endpoint security (AV) can also sometimes detect phishing links or malicious websites, so it’s worth installing anti-virus software
- Safeguard your store accounts with a strong, complex password and set up MFA
If you're unsure about an email, you can report the email as an attachment to phishing@lse.ac.uk and we can check the legitimacy of the email for you
If you suspect you have been scammed, there are steps you can take:
- Freeze your bank account through your mobile banking app
- Get in touch with your bank to let them know your bank details have been compromised
- If you used a credit card, you can dispute each transaction that appears to be fraudulent
- If you received smishing, report it to Action Fraud UK at 7726, details here
Shop safely and treat yourself and find more information from the Cyber Security team on their webpages. Always remember to Think before click! (lse.ac.uk)