National Cyber Security Centre
Black Friday shoppers urged to avoid handing cyber criminals early Christmas gift
The NCSC has updated guidance ahead of Black Friday to help people shop online securely.
- National Cyber Security Centre (NCSC) issues refreshed guidance for online shoppers ahead of Black Friday and Cyber Monday
- Online shoppers encouraged to follow top tips as criminals seek to exploit increased number of transactions in run-up to Christmas
- The NCSC is also supporting Action Fraud’s #FraudFreeXmas campaign following increase of online fraud
Online shoppers searching for Black Friday bargains are being encouraged to follow top tips to stay safe and prevent cyber criminals cashing in on the annual sales rush.
The tips from the National Cyber Security Centre (NCSC) – which is a part of GCHQ – are contained in refreshed guidance published yesterday (Monday) ahead of the sales rush traditionally sparked by Black Friday, closely followed by Cyber Monday.
The festive period is a potentially lucrative time of year for cyber criminals, who anticipate that consumers may slightly lower their guards during the rush to bag the best deals.
The tips are aimed at helping shoppers before, during, and after making an online purchase, and include advice covering secure payments to steps to take if things go wrong.
The guidance complements a wider campaign, #FraudFreeXmas, launched by Action Fraud, following a surge in reports of online fraud.
Sarah Lyons, NCSC Deputy Director for Economy and Society, yesterday said:
“At this time of year our inboxes are filling up with promotional emails promising incredible deals, making it hard to tell real bargains from scams.
“We want online shoppers to feel confident they’re making the right choices and following our tips will reduce the risk of giving an early gift to cyber criminals.
“If you spot a suspicious email, report it to us or if you think you’ve fallen victim to a scam, report the details to Action Fraud and contact your bank as soon as you can.”
The advice, which can be found in full on the NCSC’s website, includes:
- being selective about where you shop;
- only providing necessary information;
- using a secure protected payment;
- keeping your accounts secure;
- identifying suspicious emails, phone calls, and text messages, and;
- what to do if things go wrong.
Helen Dickinson OBE, Chief Executive of the British Retail Consortium, yesterday said:
“With more and more of us browsing and shopping online, retailers have invested in cutting-edge systems and expertise to protect their customers from cyber-threats, and the BRC recently published a Cyber Resilience Toolkit for extra support to help to make the industry more secure.
“However, we as customers also have a part to play and should follow the NCSC’s helpful tips for staying safe online.”
As part of its ongoing work to protect the public from cyber criminals, the NCSC’s takedown service, which is part of its Active Cyber Defence programme, has removed 113,000 malicious URLs from fake online shops over the past 12 months. These sites would collect victim credit card details and customers would either get counterfeit goods in return or no goods at all.
Earlier this year, the NCSC and the City of London Police launched the Suspicious Email Reporting Service (SERS), which received 2.3 million reports from the public in its first four months resulting in thousands of malicious websites being taken down. Members of the public who have received a suspicious-looking email over the holiday period should forward it to firstname.lastname@example.org.
More tips on protecting yourself and your family online can be found by visiting the government’s Cyber Aware website, which details six steps that will help protect against the majority of common cyber threats.
Latest News from
National Cyber Security Centre
NCSC statement on Queen's University Belfast incident08/03/2021 16:15:00
The latest statement from the NCSC regarding a cyber incident affecting Queen's University Belfast.
Advice following Microsoft vulnerabilities exploitation04/03/2021 10:25:00
Urgent updates released for Exchange server vulnerabilities
'Cyber Action Plan' to help increasingly digital small businesses stay secure from rising threats01/03/2021 14:15:00
As part of the Cyber Aware campaign, a self-assessment tool for sole traders and micro businesses has been developed.
Joint Advisory: Exploitation of Accellion File Transfer Appliance24/02/2021 15:30:00
Cyber security organisations in the UK, USA, Australia, New Zealand, and Singapore publish advice to defend against malicious cyber actors.
NCSC consolidates advice on secure home learning23/02/2021 13:15:00
Three tailored blogs to help manage remote education technology safely.
UK supports US charges against North Korean cyber actors18/02/2021 11:10:00
Indictment charges individuals with involvement in hacking and fraud conspiracy
Schools recognised by cyber experts for first-rate teaching16/02/2021 11:15:00
14 schools and colleges across the UK are the latest to receive CyberFirst Schools status for their excellent cyber security teaching.
Thousands of girls take on codebreaking puzzles in bid to win UK cyber security crown12/02/2021 14:15:00
The 2021 CyberFirst Girls Competition saw over 6,500 students take part, teams now go through to the online semi-finals in March.