Gift-guide emails and "exclusive" offers are the season's favourite phishing lure.
The scam
Phishing spikes in November and December because the bait is so plausible: a curated gift list from a brand you shop with, a loyalty reward expiring tonight, a receipt for something you did not buy. The page behind the link harvests your login or card details in seconds.
How to stay safe
Check the address, not the logo
Hover or long-press the sender and the link. A real brand mails from its own domain; lookalikes swap a letter or add a word.
Use a password manager
A manager will not auto-fill your credentials on a lookalike domain — a silent tell that the page is fake.