Ways to protect yourself while shopping online this Eid

Online shopping has been a part of our daily lives for some time now. But since 2020, the amount of shopping done online has exploded like never before. As we turn to the internet to meet our basic needs and our holiday wants, it's important to remain cautious and protect yourself.

Here are some tips to keep you and your family safe online during this Eid season:

1. Shop from a secure computer

Protecting yourself online starts at home – or at least at your home computer. If your computer or phone is compromised, then all of the information on it is vulnerable. That includes your passwords, information like your address, credit card details, and more.

Likewise, you may want to avoid shopping using a public computer, since you don't know whether or not it's protected, and whether the virus protections are up to date.

2. Look out for scam emails

One of the biggest cybersecurity threats doesn't happen on main shopping festivals themselves, but on the day after. That's when scammers start sending out fake emails claiming to be from your favourite online retailers.

These emails may claim to be from e-commerce websites. They may offer impossibly convenient deals, claim there's a delay with your order, or even give you a fake tracking link that will take you to a virus-laden site instead of a legitimate package tracking page. Scammers don't actually know if you're waiting on a package. But they know if they send these emails out to enough people on the biggest shopping weekend of the year, they'll reach people who are.

Sometimes you can identify these emails by spotting spelling mistakes, or by looking closely at the sender's email address. But others can be very convincing. If you get an email claiming to be from a retailer and it seems even a little suspicious, don't click any links and certainly don't open any attachments, like .zip or .exe files. Instead, go directly to the store's website and check your order status there.

3. Use strong passwords and multi-factor authentication where you can

Strong passwords are an absolute necessity for online security. They're especially important on sites that let you spend money. Some quick password guidelines:

Use different passwords for every site. Reusing passwords means that a hacker who gets just one password can access anything you used that password for. Different passwords for each site can minimise the damage from a stolen password.

Length matters. Many password attempts are brute-force attacks, where a program just guesses every possible password until they crack it. The longer your password is, the less likely these attacks are to work.

Keep it secret. Don't share your passwords or anything that could hint at them, with anyone. If you need to store your password somewhere, keep it on a piece of paper, hidden in your home. Keeping your passwords on a Google Drive document or an email leaves them vulnerable, but you can't hack paper.

Consider a password manager. These programs can keep your passwords under lock and key, leaving you with only one password to remember. Of course, the password manager has to be from a company that you trust.

Use multi-factor authentication when possible. Multi-factor authentication (MFA) verifies your identity through more than one channel. For example, when you log in with your password, you may also get a text to your phone with a one-time passcode to enter. This means someone would need your password and your phone to get into your account. It's an important extra layer of security. You may see this referred to as "two-factor authentication".

4. Malvertising—What it is and how to avoid it

"Malvertising" is a word for fake advertisements on legitimate websites. These ads can spread codes that can harm your computer. You don't have to go to a suspicious website in order to fall victim to malvertising. These malicious advertisements can show up anywhere. These advertisements may look normal. Once you click them, they will redirect you to sites that deliver harmful codes to your computer. Without you realising it, your computer could be compromised with viruses, or with spyware that tracks your movements or steals your private information.

To be safe, don't click on banner ads, and be wary of any deals that seem too good to be true. For some malvertising attacks, you don't even have to click on the ad to be at risk. Google is constantly trying to prevent this from happening. To remain protected, you may want to install an ad-blocker.

5. Keep a close eye on your credit card and bank statements

Many people try to keep a close watch on their spending around the holidays, but you might want to watch your credit card and bank statements for another reason—to look out for fraud. Luckily, most financial institutions let you check your account online whenever you want, without having to wait for a monthly statement. If you see any transactions that you don't recognise, you can call your bank or credit card company to report them. Likewise, pay attention to any alerts from your bank about suspicious spending, especially during this time of the year. They may not always hit the mark, but it's better to take a couple of seconds and double-check.

Unfortunately, credit card fraud is widespread. Banks are typically very responsive to reports of fraudulent transactions, so you're likely to find yourself with a refund and a replacement card on the way in no time at all.

6. Only shop from secure websites

When you're shopping online, only use websites that will keep your data secure from hackers. These encrypted websites will start with "HTTPS" instead of just "HTTP". Another sign: When you're on these secure sites, the address bar of your browser should display a lock on the left-hand side. This means they're using strong TLS/SSL (Transport Layer Security/Secure Sockets Layer) encryption to protect your information.

Using secure websites helps ensure that your payment information is kept safe when you submit it to the site. The good news is that most online shops these days are secure, but you should still always check.

7. Stay safe, but have fun

For careful deal hunters, the holiday season can be a great time to upgrade your appliances or find holiday gifts for your loved ones. Just be thoughtful about when and where you click and make sure you're protected with computer security that can detect viruses, block malicious websites, and more. To ensure that you're protected from malware, viruses, and keyloggers, a quick and simple download of Sophos Home will handle it all – including blocking compromised websites, providing privacy protection, and stopping unauthorised access to your webcam. Sophos Home offers the most comprehensive, effective protection in the cybersecurity market.