The CyberScotland Partnership (CSP) is urging individuals, families and businesses across Scotland to stay alert to online criminals when shopping online. Our latest campaign highlights the most common tricks fraudsters use to target shoppers – from fake links and bogus sellers to social media cheats promising deals that don’t exist.
Criminals are quick to exploit busy shopping seasons such as Black Friday and Christmas shopping as well as people’s everyday buying habits online. Whether it’s mimicking trusted retailers, setting up fake websites or luring people with discounts that disappear once money has changed hands, the risks are real. By taking simple steps and staying informed, you can protect your personal details and your wallet to help stay secure while shopping online.
Shop smart, sort the detail
That must-have gadget at a bargain price might not exist. Fraudsters often set up convincing fake sites or social media ads that disappear once payment is made.
Top tip: Stick to verified platforms and well-known retailers. Look for secure payment options before entering your details.
Pay securely
Paying by credit card or through a secure online payment system gives you stronger protection if something goes wrong. Criminals often insist on bank transfers because they are harder to trace and recover.
Top tip: If a seller only accepts bank transfer, walk away.
Spot the signs of a fake site
Look out for spelling mistakes, poor-quality images or suspicious website addresses. Fraudsters often use web addresses that mimic real brands, hoping shoppers won’t notice. To be certain type in the official website address, don’t just tap on a link.
Top tip: Double-check the URL and, if in doubt, visit the brand’s official site or social media channels.
Protect your password, protect your money
Weak or repeated passwords are easy for criminals to exploit, especially if they manage to access one of your accounts. Stop reusing passwords. Where possible use a unique, multi-phrase password.
Top tip: Use strong, unique passwords and consider a password manager to keep them safe.
Trust verified platforms and sellers
Phishing emails and texts disguised as delivery updates or special offers can trick you into giving away sensitive information.
Top tip: Don’t click on unexpected links. Go directly to the retailer’s official website or app to check orders.
Guest checkout is safer and means less to lose
While creating an account can seem convenient, it increases the amount of personal data that you have stored online.
Top tip: Use guest checkout where possible, limiting the information available if a retailer is targeted by criminals.
Report online criminals. Protect others.
If you or someone you know has been targeted by an online shopping rip-off report it to Police Scotland on 101. The more information that we share about the risks, the stronger our collective defence becomes.
Together we can make Scotland more cyber resilient and keep online shopping safe for everyone.
Additional Resources / For Further Reading:
The following websites include additional advice and links to other trusted resources where you can find out more:
Police Scotland
Police Scotland has lots of fantastic resources on internet safety covering a variety of topics, including:
- Online shopping – https://www.scotland.police.uk/advice-and-information/internet-safety/online-shopping/
NCSC
Citizens Advice
Citizens Advice has advice on how to get money back if you think you’ve been a victim of a scam.
Which
Which has done a guide for consumers on how to spot a fake review
Trading Standards Scotland
Age UK
Royal Bank of Scotland
Money Helper
Get Safe Online
Let’s get safe online shopping all wrapped up – Get Safe Online
To report a cybercrime, call Police Scotland on 101.
To report a phishing email, send it to report@phishing.gov.uk and for text messages send to 7726
The following websites include additional advice and links to other trusted resources where you can find out more:
Police Scotland
Police Scotland has lots of fantastic resources on internet safety covering a variety of topics, including:
Online shopping – Police Scotland
NCSC
Citizens Advice
Citizens Advice has advice on how to get money back if you think you’ve been a victim of a scam.
Which
Which has done a guide for consumers on how to spot a fake review
Trading Standards Scotland
Age UK
Money Helper
Get Safe Online
SC3 Daily Threat Reports
SC3 Threat Reports – Cyber Scotland
For more regular updates follow CyberScotland on X or LinkedIn, Instagram, Facebook and BlueSky.
LEAD Scotland Easy Read
How to shop online safely Shopping-online-safely-F.pdf
Purchase Fraud Easy-Read-Purchase-Fraud.pdf
Fake missed parcels https://www.lead.org.uk/wp-content/uploads/2024/10/Fake-missed-parcel-messages-F.pdf
General resources https://www.lead.org.uk/easy-read-and-accessible-resources/
To report a cybercrime, call Police Scotland on 101.
To report a phishing email, send it to report@phishing.gov.uk and for text messages to 7726
Related content
The CyberScotland Partnership (CSP) is pleased to welcome The Data Lab and CBI Scotland as its newest partners, further strengthening Scotland’s collaborative approach to building a safe, secure and resilient digital nation. As the voice of business in Scotland, CBI […]
A brand-new version of the highly successful cyber security and resilience training for college and university students, ‘Cyber Resilience and You!‘, has been unveiled. In the course, students, whatever their chosen subjects, will find lots of accessible, jargon-free, practical advice […]
CyberScotland Partnership launches nationwide initiative to help young children develop safe and secure online habits Scotland’s Primary 1 pupils are being introduced to cyber security right from the very beginning of their school journey through a new book that will […]