Cybercrime continues to grow, especially as an increasing number of consumers turn to online shopping to fulfill holiday wishlists.
Protect your identity, devices and wallet by following these tips for a safer online shopping experience.
- Don’t shop on a public WiFi network unless you are using a virtual private network (VPN). Use encrypted (secure) Internet communications.
- Keep your devices and software updated with the latest security patches. Use antivirus solutions, malware and firewalls to block threats.
- Only shop at reputable sites. You wouldn’t go into a store with boarded-up windows and without signage, the same rules apply online. If it looks suspicious, something’s probably not right.
- Clicking on ads on web pages or social media? Make sure it’s a legit site. Look for sites with a verified secure connection, proper grammar and are in good working order.
- Always verify the legitimacy before supplying any information. If you’ve never heard of it before, check twice before handing over your information.
- Make sure your information is being encrypted. All reputable merchants use encryption to transmit information from your browser to their servers. Look in your browser’s location bar to make sure the website address begins with “https:” instead of “http:”. Also look at the padlock icon. If the padlock is locked, your information is encrypted.
- Be careful when clicking email links. Phishing scammers may pose as popular online retailers to try and gain your personal or financial information.
- Watch for typos and poor grammar and other signs of phishing emails. Think before you click, and when in doubt, do NOT click.
- Watch for suspicious activity that asks you to do something immediately, offers something that sounds too good to be true or needs your personal information.
- Use safe payment methods for purchases.
- Only use payment methods that you feel secure using and understand.
- Before providing personal or financial information, check the website’s privacy policy. Make sure you understand how your information will be stored and used.
- Don’t store your payment information in your browser or in a merchant’s website.
- Implement strong and safe passwords using a password manager, create complex passwords with upper and lowercase letters, numbers and special characters, and two-factor authentication.
- Ship items to a secure location. Consider shipping to your office or another location that will keep your package from lingering on sidewalks or doorsteps.
Report cyberattacks
If you believe you have been a victim of a cybercrime, let the proper federal, state and local authorities know:
- File a report with the Office of the Inspector General (OIG) if you think someone is illegally using your Social Security number.
- File a report with the local police so there is an official record of the incident.
- Report identity theft to the Federal Trade Commission.
- Contact additional agencies depending on what information was stolen. Examples include contacting:
- the Social Security Administration if your social security number was compromised, or
- the Department of Motor Vehicles if your driver’s license or car registration has been stolen.
- Report online crime or fraud to your local United States Secret Service (USSS) Electronic Crimes Task Force or the Internet Crime Complaint Center.



