14 Ways To Shop Securely and Safely This Cyber Monday

Cyber Monday is one of the most important days of the year for online holiday shopping, which unfortunately makes it an opportune time for hackers and con artists to carry out cybercrimes, like identity theft, phishing scams and other types of fraud. To improve your chances of avoiding financial losses, follow Cyber Monday safety tips, such as keeping an eye out for suspicious advertisements and maintaining a secure internet connection.

Read below to see 14 tips for Cyber Monday shopping that can help you find the best deals on Christmas presents online without putting your personal information at risk.

On This Page

• 

  When Is Cyber Monday?

• 

  What Are the Most Common Cyber Monday Safety Issues?

• 

  What Are the Best Ways To Stay Safe on Cyber Monday?

• 

  What Should You Do if You’re a Victim of Online Fraud or Scams on Cyber Monday?

• 

  FAQs

When Is Cyber Monday?

Cyber Monday is an online shopping promotion that occurs on the Monday after Thanksgiving each year. During the event, many businesses put items on sale on their websites to encourage a large number of online purchases — essentially making it the digital equivalent of Black Friday. This year, Cyber Monday falls on Dec. 1, 2025.

What Are the Most Common Cyber Monday Safety Issues?

See the following sections for examples of common Cyber Monday safety issues, including cybercrimes that can allow bad actors to access sensitive data and steal your financial information.

Online Fraud

Online shoppers need to be wary of having their credit card information stolen and their money used in unauthorized ways. In 2024, TransUnion found that 4.2% of online commercial transactions involving consumers in the United States from Thanksgiving to Cyber Monday were flagged as potentially fraudulent.^[1]

Scams

As you shop for gifts online leading up to the holidays, beware of common Cyber Monday scams so you can avoid them or — at the very least — recognize when you’ve been scammed and respond quickly. Examples of common scams to watch out for include the following:^[2]

1. Nondelivery scams: When you place an order online, you should receive a confirmation email that includes a tracking number. If you don’t, reach out to the company you bought the item from right away. It’s possible you gave money to a scammer and the item won’t be delivered if you’re unable to contact the company.
2. Gift card scams: While Christmas shopping, never buy something from an online store that requires you to purchase a gift card from a different business and share the numbers on the back of the card. Scammers often steal gift card information because it isn’t tied to a specific account, making it difficult for you to track them down and recover your money after the theft.
3. Fake order scams: If you receive an email claiming there is an issue with an order you don’t remember placing, be cautious about clicking any links in that email. Even if the email seems to be from a legitimate business, it may simply be a deceptive attempt to get you to provide your credit card or banking information.
4. Fake delivery scams: Similarly, you could be the subject of a phishing scam if you get an email claiming a product you don’t remember ordering is ready for delivery. If you receive such a message, don’t click any links in the email or provide any sensitive data.
5. Fake website scams: In some cases, con artists create websites that look similar to those of legitimate companies, such as Amazon or Walmart. If you fail to notice the inconsistencies on the website, you could end up handing over your credit card information to a fraudster.

Hackers

If you let a retailer store your personal information, you risk becoming the victim of identity theft if the retailer experiences a data breach. A 2024 report found that 60% of retail companies had experienced operational disruptions due to cyberattacks, while another 2024 survey found that 86% of organizations targeted by cybercriminals were attacked on holidays or weekends, suggesting customer data could be particularly vulnerable on Cyber Monday.^[3][4]

What Are the Best Ways To Stay Safe on Cyber Monday?

Keep reading for an overview of some of the most important Cyber Monday safety tips that can help you stay safe while shopping this holiday season.

1. Only Trust Secure Sites

Before entering personal information on a website, make sure the site is encrypted — meaning it converts your data into a code that mitigates the risk of unauthorized access. There are two main things to check for when you want to know whether a website is secure:^[5]

1. URL: When you click on the URL for a secure website, it will begin with “https” instead of “http,” indicating that any information you share is encrypted as it passes from your web browser to the website’s server.
2. Lock icon: Secured websites display a lock icon to the left of the URL, indicating that the connection between your browser and the server is encrypted. By clicking the lock icon, you can see additional security details, such as how much information the website stores on your computer and whether you have saved any passwords for it.

2. Shop With Reputable Retailers

For the most part, it’s best to do your online shopping with established e-commerce brands that have proven track records, like Macy’s and Target. If you see Cyber Monday deals advertised by a website you’ve never heard of, research the company to find reviews or other credible information verifying that the business is legitimate.

Avoid shopping on a website if you can’t find any readily available information confirming that the company behind it is real and trustworthy.

3. Avoid Deals That Are ‘Too Good To Be True’

Another potential indicator of fraud is a website offering savings that are unmatched by any other reputable online retailer. Even if the unbelievable deal seems to be coming from a reliable source, it’s worth inspecting the webpage closely to verify that you’re actually dealing with the company you think you are.

Remember, cybercriminals can create websites and social media posts that closely resemble those made by well-known businesses. Keep an eye out for grammar or spelling errors in the web copy and slight misspellings or alterations in URLs or social media handles — these can be telltale signs of a malicious copycat.

4. Shop From a Secure Computer

When shopping online, try to avoid using shared or public-use computers — such as those in a library or office — since someone could access the device after you and easily view your personal information. If you must use a public computer, remember that someone nearby could see your screen and note your credit card number or other sensitive details as you type.

Also, be mindful of the internet network you’re connected to whenever you share sensitive data online. Although your data is usually protected from hackers when you are connected to a public wireless network, you should avoid shopping from unencrypted websites on public Wi-Fi — especially if you don’t have a personal cyber insurance policy to cover lost data or related losses.^[6]

In addition, refrain from entering personal information on a webpage if you’re unsure who set up the Wi-Fi network you’re using. For example, if you plan to connect to the internet in a coffee shop, ask an employee to confirm you’re joining the correct network rather than an impostor network with a similar name.

5. Make Sure Your Connection Is Secure

Even if you choose to shop online from home, you may need to take a few steps to ensure your home Wi-Fi network is protected, including the following:^[7]

• Update your router settings to WPA3 Personal or WPA2 Personal to encrypt your network
• If those options aren’t available, replace your router
• Assign your router a unique administrative username, network name, network password and router admin password
• Regularly check for new software updates for your router
• Deactivate the remote management, Wi-Fi Protected Setup and Universal Plug and Play features
• Create a secondary Wi-Fi network for guests
• Log out of your administrator account after setting up or adjusting the settings on your router
• Ensure your router’s firewall is turned on
• Secure all devices connected to your Wi-Fi network

6. Review Credit Card and Bank Statements if Shopping Frequently

During the holiday shopping season, regularly check for fraudulent charges on your credit card or unauthorized withdrawals from your bank account. Doing so helps you dispute charges quickly and hopefully avoid losing money or damaging your credit score because you’re unable to pay your full credit card balance.

It’s generally recommended to use a credit card instead of a debit card when shopping online. Because the money doesn’t automatically come out of your account, it’s usually easier to dispute charges and get a refund with a credit card than with a debit card. By law, you can only be held liable for up to $50 in fraudulent credit card charges, and many credit card companies won’t require you to pay any fraudulent charges at all.^[8]

7. Create Stronger Passwords

Instead of reusing passwords, create unique and strong passwords for every important website you log in to. Strengthen your passwords by using a mix of uppercase letters, lowercase letters, numbers and symbols. However, avoid including any personally identifiable information in your passwords, such as your name or birthday.

Because keeping track of multiple passwords can be difficult, consider using a password manager. This tool can help you avoid data loss perils by generating new passwords, storing them in an encrypted database and automatically filling in the correct password when you visit a website.

8. Never Click on Links That You’re Not Familiar With

Don’t click on links in emails from people, companies or organizations you don’t recognize — malicious links can install malware on your computer, allowing the sender to steal your data. Even if you think you recognize the sender, carefully check the email address for inconsistencies to confirm it’s legitimate and avoid falling for a phishing scam.

9. Enable 2-Step Verification

Using Google’s 2-Step Verification or a similar multifactor authentication system adds an extra layer of digital protection by requiring you to perform multiple actions before logging in. For example, to access certain data on your own laptop, you might need to enter both your password and a verification code sent to your phone.

Although taking these extra steps each time you log in can feel inconvenient, this added security helps ensure that your accounts aren’t easily hacked — even if your password is compromised. Multifactor authentication can go a long way toward protecting your home Wi-Fi network and online accounts from remote cyberattacks.

10. If Available, Use the Retailer’s App

If you plan to shop on a smartphone or other mobile device instead of a computer, consider using a retailer’s mobile app rather than searching for its website through a search engine. It’s often harder to verify whether a site is secure in a mobile browser, since you can’t easily view or click the URL to check for “https” at the beginning.

For this reason, shopping through an app downloaded directly from the App Store or Google Play is generally a safer way to ensure you’re buying gifts from the right source.

11. Read the Fine Print

Reading the fine print can help you spot questionable terms and avoid scams. For example, don’t shop from a website if the fine print says your order may take more than 60 days to arrive. Not only would your gifts arrive too late for Christmas, but you’d also lose the legal right to dispute the charge if you waited more than 60 days after it first appeared on your credit card statement.^[9]

12. Monitor Your Deliveries

Keep an eye out for any emails or other notifications related to your online orders. If you receive a delivery notice but don’t see your package outside your home after the expected delivery date, report the missing item to your local post office or the delivery company as soon as possible.

If there’s evidence that the package was delivered — such as security camera footage or photos provided by the delivery driver — but it is no longer there, you may have become the victim of package theft. In this case, you may be able to request a refund or replacement from the retailer, dispute the charge through your credit card company or file a home insurance claim.

13. Use Antivirus Software

Antivirus software acts as a final line of defense if you accidentally click a suspicious link that downloads malware onto your device. Once installed, antivirus software may automatically detect and delete harmful files. However, some antivirus programs require you to run a scan manually to detect and remove threats.^[10]

14. Back Up Your Data

Before Cyber Monday shopping, create and store secure copies of your most important data in case your hard drive is wiped during a cyberattack. You may be able to back up your data digitally via cloud storage or physically on removable media, such as USB flash drives or SD cards.^[11]

What Should You Do if You’re a Victim of Online Fraud or Scams on Cyber Monday?

There are various steps you should take if you are the target of a cybercrime on Cyber Monday. Depending on whether a scammer has access to your electronic devices, money or personal information, you may need to take some or all of the following steps:^[12]

• Get in touch with your service provider if your cell phone has been compromised
• Update your computer’s security software
• Contact your credit card company or bank to dispute fraudulent charges and ask for a refund
• If you spent money on a gift card, a wire transfer or cryptocurrency, contact the appropriate company to see if it’s possible to undo the transaction
• Reach out to the United States Postal Inspection Service if you sent cash by mail, and ask it to intercept the package
• Report instances of identity theft, and start monitoring your credit at IdentityTheft.gov
• Change your passwords, and make them stronger

If a package you ordered online is stolen from your porch or vehicle, it should be covered by homeowners insurance, and you may be able to file a claim with your insurer. That said, the value of a single package may not exceed your deductible, and even the value of several packages may not exceed your deductible by enough to justify dealing with a potential increase in your home insurance rates due to filing a claim.

Meanwhile, a standard homeowners insurance policy most likely won’t cover any losses related to cybercrimes. However, some insurance companies offer identity theft and personal cyber insurance endorsements that can help cover the costs of restoring lost data, responding to extortion attempts and recovering from financial losses caused by online fraud.^[13]