Content Staging

Black Friday & Cyber Monday: Shop Smart, Stay Secure

Black Friday and Cyber Monday bring a major surge in online activity every year. That uptick makes this one of the most active seasons for scams, fake order confirmations, and phishing attempts. As the holidays approach, the ETS Security Team is sharing a few reminders to help you stay safe when shopping at home and to stay alert to similar threats that may appear in work inboxes.

Be cautious with links that arrive by email

Scammers send convincing messages about deliveries, payment failures, or “exclusive deals” to get people to click. These often arrive around the same time as legitimate holiday emails, which can make them harder to spot. If something looks suspicious, avoid clicking. Instead, open a new browser window and type the retailer’s website directly.

Keep online shopping on trusted personal devices

Holiday deals can tempt people into quick decisions. Handling personal purchases on personal devices helps prevent work accounts and state systems from being mixed into that activity. It also reduces the risk of running into malicious websites that tend to target busy shoppers.

Watch for fake account alerts

Scammers frequently send emails claiming that an account has been locked or that information must be verified immediately. These messages are often designed to look like they came from well known retailers or shipping companies. If you receive something unexpected, go to the official site on your own to confirm.

Avoid public Wi-Fi when making purchases

Public networks in hotels, airports, or coffee shops are not secure enough for online shopping. If you need to make a purchase while away from home, use mobile data or a trusted hotspot.

Use strong, unique passwords and turn on multifactor authentication

Shopping sites see more attacks during the holiday season. Using different passwords for each account and enabling MFA provides an important layer of protection if a retailer experiences a breach.

Monitor your financial accounts

With so many transactions happening this time of year, fraudulent charges can slip through unnoticed. Checking your accounts regularly helps you catch and report anything suspicious early.

Slow down before opening “order confirmation” emails

Many phishing attempts look like shipping updates or receipts for items you never purchased. These emails often contain links designed to steal credentials or install malware. When in doubt, check your order history directly through the retailer’s website.

Good habits at home support good security at work

The same scams that target holiday shoppers often appear in work inboxes too. Staying alert to unexpected emails, unfamiliar links, and unusual attachments helps protect both your personal information and state systems.

If you receive a message that seems off, use the orange phish hook to report it. Some people hesitate because they worry about reporting a legitimate email, but it is always better to check. Reporting does not automatically delete anything. The Security Team reviews every report first, and if the message is safe, no action is taken. It is a simple way to prevent problems before they start.

If you ever have questions or want a second opinion, the ETS Security Team is here to help.

Page updated

Report abuse