Scammers won’t take a break over Christmas. Here’s how to make a plan with your family to stay safe

With Christmas just around the corner, it can be a very busy and stressful time of year. Between festive gatherings, ticking off what’s left on your yearly to-do list and shopping online for that perfect gift, it can be easy to let your guard down against fraudsters.

Australians lost more than A$2 billion^[1] to scams in 2024. This year, losses are likely to be similar.

Often, scammers will try to create a sense of urgency, pushing their intended victims to act now. As we prepare our shopping lists and festive lunches, now is also the perfect time to be alert to scams.

Here’s how to prepare yourself – and your loved ones – for a safe and scam-free Christmas and New Year.

The current wave of scams

Online shopping scams are particularly rife at this time of year, with sales season well under way. They can take many forms.

Scammers will create fake online stores^[2], create advertisements for products that don’t exist^[3] or send products that are inferior in quality^[4] to what was expected.

Many people are expecting more packages than usual to arrive at this time of year. Taking advantage of this, scammers send phishing text messages and emails pretending to be from from the postal service^[5] and couriers.

Investment scams occur year-round and Christmas is no different. Scammers may target you through phone calls, text messages, emails and social media posts.

Scams involving cryptocurrency^[7] are particularly common this year, and any unsolicited “investment opportunities” should raise immediate suspicion.

Romance scams: Christmas can be difficult time of year for many people. Loneliness hits a bit harder for some, and singles may be looking to start the new year in a new relationship.

Romance scams^[8] exploit our desire for a relationship. If your “partner” is asking for money under any circumstance, particularly one you have only ever met online, it should be a warning sign.

Seeing and hearing is no longer believing

The evolution of technology is rapidly changing the ways we conduct our personal and professional lives. Scammers have embraced this opportunity.

Fraudsters will use whatever tools possible to persuade and manipulate unsuspecting victims. And artificial intelligence tools have changed the game.

Deep fakes: it is easier than ever to generate high quality and realistic images^[9] and videos. Offenders will use these to help support their stories and garner your trust. Just because you have seen something does not mean it is real.

Voice cloning: as with images, scammers can now create realistic impersonations^[10] of a person’s voice with relatively small amounts of material. The distressed phone call you receive from a loved one may not be them at all, but just an scammer trying to get your money.

Drafting scripts: while large language models, such as ChatGPT and Claude, may be useful for helping you draft an email or report, scammers are using these tools to help script their fraudulent pitches^[11]. It can help offenders tailor specific ways to target potential victims.

The 3-step plan you should make now

While the threat of scams may seem overwhelming, there are three positive steps you can take right now, to reduce your risk of being a victim.

1. Do your own self-assessment

Everyone has a weakness or vulnerability that makes them open to scams. And each one is going to be different. Scammers are ruthless and systematic in their targeting.

Think about your own situation, your personality and your routines. What types of approaches might you be vulnerable to? How might you enact measures to counter these?

2. Conduct a digital audit

Ensure your accounts and devices are secured properly, with strong passwords, updated software, and multi-factor authentication where available.

Make sure you are comfortable with your privacy settings across any social media accounts. While this may seem obvious, it is still important to get the basics right and to have control over your digital footprint.

3. Create a family password

As a family, choose a word or phrase that is not obvious but is significant to you and easy to remember.

Think of it as a family password. Use this family code word or pass phrase to verify any communications that purportedly come from family members.

Staying connected

Also, make it part of your routine to talk to family and friends about the texts and emails you receive, as well as what you have seen in the news. Talking openly about the ways you are being targeted helps others recognise when it happens to them.

Analyse the different approaches you get and try to unpack what the offender is hoping to achieve and why they might be successful.

If you or someone in your family is a victim of a scam, know who you can talk to. If you are unsure of something you receive, feel confident to step back and get advice or talk to someone you trust.

Offenders rely on us acting in the moment and will instil a sense of urgency. Know that it is OK to hang up, not respond or walk away.

If you or someone you know has been a victim of a scam, you can report it to ReportCyber^[12] as well as your bank or financial institution. For support, contact iDcare^[13]. For further prevention advice, consult Scamwatch^[14].

References

1. ^{^} more than A$2 billion (www.scamwatch.gov.au)
2. ^{^} fake online stores (www.abc.net.au)
3. ^{^} products that don’t exist (www.mcafee.com)
4. ^{^} inferior in quality (www.abc.net.au)
5. ^{^} postal service (auspost.com.au)
6. ^{^} synthetick/Getty (www.gettyimages.com.au)
7. ^{^} cryptocurrency (www.abc.net.au)
8. ^{^} Romance scams (eprints.qut.edu.au)
9. ^{^} realistic images (www.csiro.au)
10. ^{^} realistic impersonations (theconversation.com)
11. ^{^} fraudulent pitches (www.reuters.com)
12. ^{^} ReportCyber (www.cyber.gov.au)
13. ^{^} iDcare (www.idcare.org)
14. ^{^} Scamwatch (www.scamwatch.gov.au)