2022 Holiday Shopping Cybersecurity Tips to Keep Yourself Safe

With online shopping accounting for over 25% of seasonal retail sales, paying close attention to your holiday shopping cybersecurity is a great way to keep the season joyful.

Cybersecurity concerns for holiday shoppers in 2022

Online holiday shopping issues make gifting feel a little less cheerful, and sugar cookies taste a little less sweet. Prepare yourself for a safe holiday by getting a good grasp on common online scams, frauds, and hacks that are sure to be re-gifted in 2022. 

  • Phishing: You can spot fake emails pretending to be from reputable companies by remembering one basic fact: Reputable companies will never ask you for information like account passwords or credit card numbers in an email. Lack of personalization, misspellings, and poor grammar are other telltale signs of a phishing scam. Always err on the side of caution by deleting any questionable emails or text messages and reporting them as spam if possible.
  • Scams: Holiday scams have moved from brick-and-mortar shopping into the digital world, preying on the hectic pace of the season. Here are some common scams to watch out for:
    • Non-delivery & non-payment: Buyers are left holding the bag when items ordered online never arrive, while sellers lose out when promised online payments are never completed. Sticking with reputable websites and using credit (not debit) cards to complete online transactions can limit your exposure to these common holiday season pitfalls. Credit cards typically make it easier to dispute fraudulent transactions, and many also offer purchase and price protection for your orders.
    • Charity scams: This especially unethical variation of phishing uses fake charities or nonprofits as bait. Never give your credit card information to a charity organization you’re unfamiliar with, either by email or over the phone. Always go to the official website and research the organization thoroughly before you consider donating. 
    • Fake online shopping websites: Holiday scammers create fictitious web storefronts to lure shoppers with bogus products and discounts. Some of these websites are designed to look very similar to their legitimate counterparts. Stay on the lookout for subtle differences in layout, poor grammar, invasive pop-ups, misspellings, and extra characters in the URL to safeguard your holiday shopping safety.
  • Hacks: The holiday season can be a bountiful time for hackers, with e-commerce multiplying opportunities for password and personal information theft. Public, unsecured WiFi in malls, airports, and hotels can be convenient for last-minute orders on the go but not as great for browsing. A VPN to encrypt traffic coming in or out of your device can protect you from hackers who rely on these public settings to intercept data.
Graphic of icons representing safe internet usage with the protection of a VPN, vs the unprotected use of the internet without a VPN.
  • Data breaches: Some forms of cybercrime lead to widespread leaks of Personally Identifiable Information (PII), affecting thousands or even millions of people. Once an online retailer or financial institution you’ve done business with has been breached, it’s safe to assume your information may have been compromised or shared.

Want to learn more about using a password manager?

Check out our personal plans or get started with a free trial.

Traveling during the holidays? Practice these five cybersecurity tips for travelers.

7 tips for staying safe during your holiday online shopping

Hectic work, shopping, and travel schedules make online shopping a must for the holidays. Our top holiday cybersecurity tips and Cyber Monday security tips lead to worry-free online shopping.

  1. Create strong, unique passwords for each account

Frantic bargain hunting on the internet can quickly erode our password hygiene, and reusing passwords is one of the riskiest habits of all. Why? Because your password is almost always the first point of entry for a hacker. When you use the same password for several accounts, they can all be compromised. You should also avoid common words (including your first name) in your password and scramble letters, numbers, and special characters to protect yourself from brute force tactics.  

  1. Avoid saving your passwords and credit cards to your browser or on retailer’s websites

Internet browsers come with built-in password managers that store and autofill passwords and credit card numbers. They may be convenient, but because browser password managers don’t always use encryption, they’re vulnerable to malware and hacks and should be avoided. You should also protect your credit card online by erasing saved browser passwords you’ve stored in the past. A safe alternative is saving your credit card information in an encrypted digital wallet like Dashlane’s. 

A screenshot of the Autofill payment information experience using the Dashlane web extension.
  1. Use a password manager

Stand-alone password managers with on-demand 2-factor authentication and bullet-proof AES-256 encryption keep your information secure as you browse your favorite shopping accounts. Dashlane Password Manager uses advanced algorithms to create and store complex, random passwords on external servers so they’re never exposed to external threats. User-friendly Autofill and single sign-on (SSO) features get you through the checkout line quickly and securely. 

  1. Be skeptical of ads

Some holiday shopping safety tips rely on software and technology, while others are rooted in street smarts. Black Friday and Cyber Monday are touted as the can’t-miss shopping days of the season. When it comes to pop-up ads and unfamiliar email messages, if a deal is too good to be true, it probably is. These suspicious ads could lead you to spoofed landing pages or even malware links. Follow your best instincts and avoid them.

  1.  Avoid phony or unfamiliar retailers

You wouldn’t buy your family’s holiday gifts from the trunk of a car in a dark alley, and online shopping should be no different. Along with phony ads, scammers often create fake retail websites just to steal bank account information or credit card numbers from unsuspecting customers. Do your holiday shopping safely by staying on secure sites from retailers you trust. 

  1. Beware of skimming devices

Malicious card readers hidden in ATMs, at gas stations, and at other locations copy your card information and allow cybercriminals to access your accounts. Look for anything unusual on or near the card slider and always cover the keypad to prevent hidden cameras from stealing your PIN. E-skimming takes this concept online by embedding malicious code into websites to “skim” payment information from unsuspecting consumers. This is another reason to stick with familiar and reputable online retailers with robust cybersecurity resources.

  1. Monitor your credit

No matter how careful you are, there’s still a chance someone will gain access to one of your credit card numbers or even open a new account in your name. Keeping track of changes to your credit score and behavior regularly and ensuring that you’re notified right away whenever a new account is opened in your name are wise practices. Dark web monitoring adds additional security by continually scanning the web for personal information like email addresses and passwords.

A graphic representing a holiday cybersecurity wishlist with the items 1) A shiny new password manager, 2) A big, strong VPN, 3) 2FA for everything, 4) A handy digital wallet, and 5) 24/7 dark web monitoring listed.

The basics of cybersecurity

Keeping our personal financial information secure isn’t someone else’s job. We all need to be aware of cybersecurity basics to keep us protected during the holiday season and throughout the year.

  • Strong passwords: Unique, hard-to-guess passwords are the first and best line of defense for personal cybersecurity. Password managers securely and easily create, store, and recall these for you.
  • 2-factor authentication: 2-factor authentication (2FA) means using a second login, like a code sent to an app, to verify you are who you say you are.
  • Dark web monitoring: Stolen personal information might end up on the dark web before you even realize that bad actors took it. Dashlane’s 24/7 Dark Web Monitoring tool scans more than 20 billion records and quickly alerts you when your information is detected.
  • Secure WiFi: A virtual private network (VPN) creates a safe, encrypted “tunnel” between a device and a secure network to mask the IP address and make any public WiFi service more secure.

Dashlane makes online shopping secure

To stay safe this holiday season, you need solutions that support fast, convenient, and worry-free online transactions at home and on the go. Strong, encrypted passwords, a digital wallet, 2-factor authentication, a secure VPN, and Dark Web Monitoring are holiday shopping cybersecurity essentials, and Dashlane provides them all. Log in to your trusted shopping sites instantly with Autofill and check out faster with your shipping and billing info stored securely in your Dashlane app.

Dashlane keeps the holidays joyful.

Put Dashlane on your holiday wish list today to keep your shopping experience safe, secure, and convenient. Learn more about it in our guide: Security and Privacy When You’re Holiday Shopping.


  1. Finical, US Holiday Shopping Statistics 2021,” 2021.
  2. Dashlane, “How to Spot a Phishing Scam,” November 2019.
  3. FCC, “Beware of Holiday Charity Scams,” December 2020.
  4. Dashlane, “Why Do You Need a VPN? Don’t Miss These 3 Key Benefits,” August 2020.
  5. ZDNet, “Microsoft: Using multi-factor authentication blocks 99.9% of account hacks,” August 2019.
  6. Dashlane, “Dark Web Monitoring,” 2022.
  7. Dashlane, “Traveling Soon? Add these 5 Cybersecurity Essentials to Your Packing List”, October 2021.
  8. Better Homes & Gardens, “There’s a New Way Hackers Are Targeting Online Holiday Shoppers—Here’s How to Protect Yourself,” October 2019.
  9. Dashlane, How to set up and use Credit Monitoring,” 2022.
  10. Dashlane, “Stay Safe this Holiday Season,” 2022.
  11. WUSA9, “Police warn of card skimmers after multiple found in Prince George’s County,” October 2022.

    Dashlane is a web and mobile app that simplifies password management for people and businesses. We empower organizations to protect company and employee data, while helping everyone easily log in to the accounts they need—anytime, anywhere.

    Read More