Holiday Scam Graphic

Unwrapping Holiday Scams and Delivering Essential Safety Tips

Quick Summary

  • The season of giving is marked by an increase in sophisticated scams, targeting job seekers, charitable donations, the mail system, and more to steal personal information, institutional data, and money. 
  • The rise in online shopping creates more opportunities for mail scams with malicious links and QR codes, as well as various social media scams like fake pet ads and fraudulent free trials. 
  • Follow cybersecurity best practices to stay safe, including sticking to reputable retailers and employers, using strong, unique passwords or passphrases for all accounts, and never unknown clicking links.

Listen to an AI-generated summary of this article.

 

The season of giving is here, but if we’re not careful, scammers will turn it into a season of taking! With all the gifts being sold, bought, and shipped, there are many opportunities for bad actors to steal more than seasonal cheer. 

Information and Educational Technology (IET) is unwrapping the top holiday scams and delivering the best ways to stay safe. First, let's focus on the nice before we get to the naughty.

 

Holiday Season Best Practices

When shopping, donating, or looking for seasonal work online, follow these tips to stay safe:

  • Stick to known, reputable retailers and businesses. Always do research and check reviews.
  • Make sure a website's URL is legitimate and secure. A site you're buying from should have https in the web address. If it doesn't, don't enter your information.
  • Be especially wary if a company asks you to update your password or account information. Look up the company's phone number on your own and call them directly to verify.
  • Never provide payment information over email or an unsecured chat.
  • Use strong, unique passwords for all online accounts. 

 

Top Holiday Scams of 2025

Now, the naughty. Keep an eye out for the following red flags that often indicate a holiday scam and learn how to avoid them.

Employment Scams

According to the Better Business Bureau (BBB), employment scams are the number one riskiest scam for people ages 18-34. That makes Aggies a prime target for identity theft or significant financial loss.

Red Flags

  • Upfront Fees & No Interview: You’re asked to pay for necessary equipment or hired via email or text without an interview.
  • Unprofessional Communications: You receive calls, texts, or emails from some random sender containing obvious grammar and spelling errors.
  • Requests for Banking Info: Fake employers ask for your bank account details or social security number before signing an official offer letter or starting the onboarding process 

How to Find Legitimate UC Davis Jobs

Always use official, verified channels when searching for university jobs: 

Charity Scams 

Scammers often capitalize on holiday goodwill by imitating real charities or creating fake ones, playing on your emotions, capitalizing on tragedy, or using urgency tactics to pressure you into giving. 

Red Flags

  • Pressure to Donate: You're urged to give immediately, often via phone calls, emails, or text links you did not expect or did not request.
  • Unusual Payment Methods: You’re asked to pay via non-traceable methods like gift cards, wire transfers, or cryptocurrency.
  • Fake Names: The charity’s name sounds very similar to a well-known organization but is misspelled or phrased slightly differently.  

How to Donate Safely

Package Scams 

We all know you shouldn't leave packages out where someone can steal them, but there other, sneakier delivery/mail scams out there this holiday season.

Red Flags

  • Fake Delivery Issues: You receive an unexpected call, text, or email (phishing) from someone impersonating a major carrier (e.g., FedEx, UPS, USPS) asking you to update delivery preferences or resolve an issue by clicking a link.
  • Quishing (QR Code Phishing): A package or letter arrives, often disguised as a "gift" or a notification, that includes a QR code you are prompted to scan.
  • Brushing: You receive merchandise you never ordered and the scammer uses your name and address to generate fake, positive reviews to boost their product's sales and rating.

How to Send & Receive Mail Safely

  • Never click a link in an email or text regarding a delivery issue. Instead, go directly to the official carrier's website and track your package using the legitimate tracking number.
  • Do not scan QR codes from a package you did not order. It may direct you to a website designed to steal your personal or financial information.
  • While often harmless to you personally, do not pay for or return the item. If you are concerned, you can report it to the retailer to help them track the fraudulent seller.

Social Media Scams 

There are several scams currently trending on social media platforms. 

Red Flags

  • Pet Scams: You see adorable photos/videos of pets for sale, but they require upfront payment via untraceable methods.
  • Misleading Ads: Products are advertised at extreme discounts or "free trials" requiring only shipping costs.
  • Secret Sister Gift Exchange: A chain post or message promises a large return of gifts or cash for sending one small gift to a stranger.

How to Avoid a Social Media Scam

  • Never purchase a pet you haven't seen in person. Adopt from local, verified animal shelters or meet the seller/breeder face-to-face at a secure location to inspect the animal and paperwork. Use traceable payment methods for pet purchases.
  • Research the company and product independently. Check for reviews outside social media comments and look for a working customer service number and physical address. Scrutinize the fine print on "free trials".
  • Do not participate in gift chains. They are illegal, require you to share personal information, and you will likely receive nothing in return. Report the posts to the social media platform.

Learn More 

Information about scams and safety tips were compiled from leading industry security experts: 

Find Support 

If you receive a suspicious email, text message, or other communication that attempts to trick you into revealing personal information or login credentials, do not click any links. Forward the message to [email protected].

If you believe your UC Davis login credentials have been compromised or you interacted with a fraudulent message, contact [email protected] immediately.