Every year the run-up to the holidays brings a wave of fraud, and this autumn is no different. Security researchers have already reported Halloween-themed campaigns arriving by email, text message, instant message and social media ads, and the same crews tend to pivot to Black Friday and Christmas themes within weeks. The tricks are familiar, but they are getting more polished, so it is worth knowing the handful of patterns behind most losses.

1. The fake shop with the too-good price

A slick storefront, a famous brand and a discount of 70 percent or more. Fake shops are cheap to clone and are promoted through social ads and look-alike search results. Before you buy, look at how old the domain is, whether the contact page lists a real address, and whether the only payment options are bank transfer or crypto. If a deal cannot be explained, it is usually not a deal.

2. The delivery text you were not expecting

Parcels peak at this time of year, which makes a message like “your package could not be delivered, pay a small fee to reschedule” feel plausible. The fee is small on purpose, because the real goal is your card details. Do not tap the link. Open the courier’s official app or type the address yourself and enter the tracking number you were actually given.

3. QR codes in places they should not be

Scammers know people scan without thinking. A QR code on a flyer, a parking meter sticker or inside a PDF can lead to a credential-harvesting page, a trick often called quishing. A code hides the destination from you, so treat it the way you would treat a link from a stranger: check where it lands before you type anything in, and be especially wary if it asks you to log in.

4. Giveaways and “exclusive” survey rewards

• A prize you never entered for is not a prize.
• Genuine brands do not ask for a card number to cover “shipping” on a free gift.
• Check that the account running the giveaway is verified and has a real history.

5. Fake seasonal job offers

Extra hands are genuinely needed at this time of year, which scammers exploit with offers of easy remote work that start with a request to buy equipment or pay a registration fee. A real employer does not charge you to start.

A short checklist before you pay

• Pay by credit card or a protected payment service where you can, so you have a way to dispute the charge.
• Type the shop’s address yourself rather than following a link from an ad or message.
• Be suspicious of urgency. Countdown timers and “only 2 left” banners exist to stop you thinking.
• If you already paid and something feels wrong, contact your bank straight away. Speed matters.

None of these habits take long, and together they close off most of the routes that scammers rely on during the busiest shopping weeks of the year.

Have first-hand experience? Share your resources and links in the comments below — readers value real recommendations.