The Lure of the Unbelievable Deal
Scammers know that the festive rush creates a sense of urgency and excitement. They exploit this by creating offers that are too good to be true, like a flat 90% discount on a popular smartphone or luxury item. These deals, often promoted through social
media ads, WhatsApp messages, or emails, are designed to make you click before you think. The message might use phrases like “limited stock” or “offer valid for today only” to pressure you into acting fast. Remember, if a deal seems wildly unrealistic compared to official retailers, it is almost certainly a trap designed to capture your payment details or install malware on your device.
Inspect the Link and Website URL
Before clicking on any link, especially one from an unsolicited message, take a moment to inspect it. Scammers often use 'lookalike' domains that closely mimic real ones, but with subtle misspellings or different endings like '.xyz' instead of '.com'. For example, you might see 'Flipkart-deals.co' instead of the official 'Flipkart.com'. Hover your mouse over the link on a computer, or long-press it on a mobile device, to preview the full URL before you visit the page. Once on a site, look for 'https://' and a padlock icon in the address bar. However, be aware that even scam sites can have these, so it is not a foolproof guarantee of safety.
Red Flags on the Website Itself
Legitimate businesses invest in professional websites. Scam sites, on the other hand, are often riddled with errors. Look for poor grammar, spelling mistakes, and low-quality or stolen product images. A genuine e-commerce site will have detailed 'About Us', 'Contact Us', and 'Return Policy' pages. If this information is missing, or if the only way to contact them is a simple web form, be very suspicious. Another major red flag is the payment options. If the site only allows for prepaid payments through UPI or direct bank transfers and does not offer a Cash-on-Delivery (COD) option, it is best to stay away. Legitimate businesses offer multiple secure payment gateways.
The Rise of AI-Powered Scams
Cybercriminals are now using Artificial Intelligence to make their scams more convincing. This includes creating deepfake videos of celebrities endorsing a product or generating thousands of fake positive reviews to make a scam site seem trustworthy. These AI-generated reviews can be hard to spot but sometimes have tell-tale signs, like repetitive phrasing, an overly formal tone, or multiple reviews being posted on the same day. Be wary of encountering dozens of scam attempts daily, as reported by many Indian consumers who have seen everything from fake gift card wins to fraudulent refund notifications.
What to Do If You Click a Phishing Link
If you accidentally click a suspicious link, don't panic. The most important thing is not to enter any information like passwords or bank details. Immediately disconnect your device from the internet to prevent any potential malware from spreading. If you did enter a password, change it immediately on all other accounts where you might use it. If you entered card or UPI details, contact your bank and report the fraud at once. You should also report the incident to the National Cyber Crime Reporting Portal by calling the helpline number 1930. Afterwards, run a full antivirus scan on your device to check for malware.
