Story image

Don't let criminals ruin your online shopping

20 Nov 18

It’s that time of year again. Not only have New Zealanders developed a bit of a taste for sales like black Friday and cyber Monday, the holiday season is well upon us. The internet – as vast and as diverse as it is, will be where some of us will do our shopping.

But you don’t have to venture too far on the internet to get into trouble, because criminals will take any opportunity to steal your money or your personal information. Security firm Trend Micro says there are many different ways criminals will try their luck, and some of them might not be as obvious as you think.

Is it a good idea to gift a connected device?

Whether it’s a mobile phone, smart appliance or any device connected to the internet, some manufacturers don’t quite understand that device security is very important. Security holes can expose people to online threats. 

Trend Micro explains a few tips:

  • Update firmware with the latest patches from the manufacturer and only connect to secure networks
  • When registering an account for a smart device, use strong passwords and usernames that are different from other online accounts.
  • If you want to give a smart device to a child or teen, check what information the device wants from users, how it uses, stores and protect that information.
  • Teach users to use the devices responsibly and safely

So you want to use your phone to buy stuff

Browsing and purchasing online can be easy, but telling genuine and fake sites apart can be tricky. 

  • “Rely on your bookmarked and frequently visited sites, because even search engine results can lead you to malicious spoofed shopping sites,” Trend Micro says.
  •  Ignore ads, emails, promos and links with questionable offers from unknown sources. 
  • If you’re downloading online shopping apps, make sure they’re from genuine vendors to ensure secure transactions.
  • Use the security features on all of your devices before you use them. 
  • Review publicly posted personally identifiable information (PII). Why? This information can be used as credentials to access your IoT and voice-enabled assistants without you knowing it, or craft socially engineered emails this season.

That email you just received might not be legit

Criminals can create genuine-looking emails that spoof websites like Apple, tempt you into fake bargains, or conduct phishing attacks. Trend Micro says before you click:

  • Don’t immediately click on links embedded in emails. Bookmark your frequently visited websites or directly type the known URLs or email addresses of the companies’ representatives. Use a legitimate scam checker to scan questionable emails.
  • Call the company or organisation via known contact numbers and confirm if they have email requests, verifications, or if they have existing promos as advertised in the email. Beware of calls claiming to be from companies asking for your credentials. Legitimate organisations such as banks will never ask for your password over the phone or via email.
  • Limit the amount of personal information you share online.

Be wary of businesses on social media

Criminals can create fake companies or spoof genuine businesses, so do some digging before you buy from a company you’re not sure about.

  • Manage the information you share, Trend Micro says.
  • Be aware of the permissions and information collected by your installed social media apps and visited websites such as your location, email address and contact information.
  • Look for the verifier symbols (such as the blue check marks) beside the names of brands and retailers before interacting, shopping, or giving information. Most social media platforms now have these to reduce the number of fake pages to help protect consumers from online criminals.
  • Be wary of clickbait and alarming headlines, shopping promos, and bargain offers.

Finally, general tips like keeping your personal information private, using a security solution (for computer and mobile), keeping your browser and devices up to date, and using only trusted payment systems  will help you have a much better experience with online shopping. 

GirlBoss wins 2018 YES Emerging Alumni of the Year Award
The people have spoken – GirlBoss CEO and founder Alexia Hilbertidou has been crowned this year’s Young Enterprise Scheme (YES) Emerging Alumni of the Year.
IDC: Standalone VR headset shipments grow 428.6% in 3Q18
The VR headset market returned to growth in 3Q18 after four consecutive quarters of decline and now makes up 97% of the combined market.
Meet Rentbot, the chatbot that can help with tenancy law
If you find yourself in a tricky situation  - or if you just want to understand your rights as a landlord or tenant, you can now turn to a chatbot for help.
PlayerUnknown’s Battlegrounds (PUBG) finally releases on PS4
PUBG on PS4 feels like it’s still in Early Access as the graphics look horribly outdated and the game runs poorly too. 
How AI can fundamentally change the business landscape
“This is an extremely interesting if not pivotal time to discuss how AI is being deployed and leveraged, both in business and at home.”
CERT NZ highlights rise of unauthorised access incidents
“In one case, the attacker gained access and tracked the business’s emails for at least six months. They gathered extensive knowledge of the business’s billing cycles."
Report finds GCSB in compliance with NZ rights
The Inspector-General has given the GCSB its compliance tick of approval for the fourth year in a row.
Game review: Just Cause 4 on PC
Rico Rodriguez returns to wreak over-the-top havoc for a fourth time. This time the island nation of Solís is our hero’s sandbox, ripe for destruction.