The seasonal holidays have arrived, and while many shoppers are hunting for the best deals, bad actors are also at their most active. One malicious link could be the difference between a merry and a miserable holiday.
VPNs have become an important tool in tackling scammers. Many now offer the features you need to stay safe online, whether that’s securing your internet connection while shopping online, or providing additional tools such as malicious link checkers and data breach alerts.
To get a better look at how these threats are evolving, I spoke with Norton’s VPN team at their office in Prague to discuss the best ways for users to stay safe this season
“It’s prime time to save money. But it’s also prime time for scammers to strike”
That was the key message from Norton VPN’s Product Lead, Himmat Bains. His key message is simple: whether you are facing phishing emails, text messages, or phone calls, “you must remain vigilant.”
Scams are adapting and appearing in more forms than ever before. Despite improvements to automatic scam detection on mobiles, there is still plenty of room for error.
If you see something that’s too good to be true, there’s a chance it probably is”
Himmat Bains, Product Lead, Norton VPNAccording to data from NordVPN – another provider focused heavily on scam protection – the number of malicious websites increased by over 250% in the month leading up to Black Friday in 2025.
This increase in malicious sites poses a huge risk throughout the holiday season – particularly for people who ordinarily avoid online shopping or those with little cybersecurity awareness.
NordVPN’s data unsurprisingly showed that Amazon is the most impersonated site, but it isn’t the only risk. Fraudulent emails and texts often promote deals supposedly from various household brands.
“If you see something that’s too good to be true, there’s a chance it probably is,” Bains explains.
Norton’s advice
Luckily, protecting yourself against these risks is straightforward. First and foremost, use your common sense.
“If you read that someone wanted to give you a million dollars, you’d immediately think that’s a bit suspicious. Take that level of suspicion and translate it into your shopping,” Bains said.
If you are still unsure about a deal, Bains advises adopting a manual approach to ensure its legitimacy. You should type the website address directly into your browser instead of clicking on links provided in messages. While it takes slightly longer, it can save you a lot of trouble in the long run.
Often, these deals use "limited-time" countdowns to create panic, hoping you will click without thinking. “If you’re being time pressured into something, take 15 minutes and come back,” Paul DeLange, a Lead Engineer for Norton VPN said.
In those 15 minutes, you can always do some checks of your own.
In short, there are three key takeaways you should remember while doing your last-minute Christmas shopping.
- Use common sense - if a deal looks too good to be true, it probably is
- Do your own checks - just because a website claims it’s Amazon, doesn’t mean it is
- Take your time - don’t fall victim to time pressure, do your checks before you buy
It’s worth remembering that AI is making fake websites more convincing than ever. This means it’s important to use tools alongside your own intuition to check the legitimacy of any deals you’re unsure of.
Norton’s AI Scam Protection isn’t the only solution out there if you’re worried about scams. NordVPN offers email and call protection, and Surfshark offers scam protection on emails, both of which we’ve put to the test in 2025.
No VPN threat protection systems are perfect as yet. This is why we always recommend getting separate, dedicated protection alongside a VPN to tackle issues such as malware and phishing links. That said, any of these solutions will add more protection than not having one at all.
We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone using a VPN service to break the law or conduct illegal activities. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.
English (US) ·