DUNMORE, Pa. — The holiday season brings joy, gift-giving and, unfortunately, a surge in online scams targeting unsuspecting shoppers. From fake shopping sites to phony shipping notifications, cybercriminals are banking on the festive rush to catch people off guard.
With a few smart steps, though, cybersecurity can keep your holidays merry and your finances safe. Fred Aebli, lecturer of information science and technology at Penn State Scranton, said the holidays bring a spike in fake shopping sites offering unbelievable deals, phony shipping notifications pretending to be UPS or FedEx, social-media sellers who vanish after payment and bogus charity requests tugging on holiday heartstrings.
“If a deal or donation looks too magical to be real, it probably belongs in a Hallmark movie — not on your credit card statement,” Aebli said.
Watch for red flags
Aebli mentioned several red flags that shoppers should watch for, including misspelled URLs or sites that look almost right, shopping sites that lack "https" in the web address and “limited time” deals that pressure buyers to act fast.
Other warning signs include requests for payment via gift cards, Venmo or wire transfer; emails with odd grammar or generic greetings; and websites with no contact information, return policy or customer reviews.
Secure devices before shopping
Aebli recommended giving computing devices a quick tune-up before shopping online.
“Install updates, turn on multi-factor authentication, use strong Wi-Fi passwords and avoid shopping over public networks,” he said. “A password manager can also be a lifesaver. Consider also migrating to the use of PASSKEYS.” He recently shared more insights on this topic in an episode of Mr. Fred’s Tech Talks — his independently produced podcast dedicated to helping parents, teachers and students understand technology. Through the podcast, Aebli offers practical advice on IT, cybersecurity and emerging trends, with the goal of making technology approachable and inspiring others to embrace digital literacy.
Students face unique cybersecurity risks during winter break, Aebli said. Traveling and extended gaming sessions often lead to connecting to unsecured Wi-Fi at airports, coffee shops and relatives’ homes; borrowing shared family computers that may lack updates or protection; and storing passwords in browsers that multiple people use. Increased gaming activity also brings scams and phishing attempts, and being away from campus security tools makes vigilance even more important.
Act fast if scam occurs
If a scam or hack occurs, Aebli said quick action is critical.
“Change your passwords immediately, especially for email and financial accounts," Aebli said. "Contact your bank or credit card company to freeze charges, run an antivirus scan and turn on multi-factor authentication if you haven’t already. Reporting the scam to the platform, whether it’s Amazon, Facebook Marketplace or a retailer helps protect others, too.”
Penn State Scranton’s IT department offers resources to help students and employees stay secure online. For tips and assistance, visit Penn State’s cybersecurity page or contact the campus' IT help desk.
Information Technology degree at Penn State Scranton
For those inspired by Aebli’s advice and interested in turning cybersecurity awareness into a career, Penn State Scranton offers a bachelor of science in information technology.
The program prepares students for in-demand fields such as cybersecurity, networking, systems analysis, application development, cloud technology and IT support. Through hands-on coursework, industry-relevant projects and internship opportunities, students graduate with the practical skills needed to protect organizations and innovate in an increasingly digital world.