Back to articles

Make a wish list, not a phish list

Gift-guide emails and "exclusive" offers are the season's favourite phishing lure.

Campaign art: a hand scrolling holiday offers on a phone

The scam

Phishing spikes in November and December because the bait is so plausible: a curated gift list from a brand you shop with, a loyalty reward expiring tonight, a receipt for something you did not buy. The page behind the link harvests your login or card details in seconds.

How to stay safe

  • Check the address, not the logo

    Hover or long-press the sender and the link. A real brand mails from its own domain; lookalikes swap a letter or add a word.

  • Use a password manager

    A manager will not auto-fill your credentials on a lookalike domain — a silent tell that the page is fake.

Shop with confidence

BlackCloak protects your accounts and devices so you can shop safely. Speak to our team about concierge cybersecurity.