With the onset of Diwali and the festive season, e-commerce platforms offer bumper sales and discounts. But along with the offers, cybercriminals also become active. As Indian shoppers use online shopping, messaging, and banking apps to take advantage of the offers, scammers use new and clever methods to defraud them. Cybersecurity and antivirus software company Kaspersky shared with the media how hackers are targeting people during the festive season and provided tips on how to avoid scams.
According to Kaspersky, scammers always set their traps where shoppers spend the most time. Between January and October 2025, more than 6.4 million phishing attempts posing as online stores, banks, and payment systems were blocked, nearly half of which directly targeted online shoppers. This means 6.4 million people were saved, but the threat remains elusive.
These online scams have become so realistic that they are difficult to detect. Fake websites now mimic genuine brands. Recently, fake iPhone Duo websites were spotted, offering 25% discounts, countdown timers, and WhatsApp chats to lure people. Furthermore, these scammers take full advantage of festivals and major occasions in India. For example, in 2025, several fake websites selling counterfeit goods in the name of the Maha Kumbh Mela emerged, where people paid but never received the goods. Similar practices are prevalent during Diwali and festive sales.
Many scammers use the names of major companies and major stores. They lure people to fake websites before sales begin, promising special discounts. These fake websites then steal users’ personal and payment information. Some websites initially ask for only their name, address, and contact details, claiming a manager will call later, which ultimately leads to a major financial fraud. Fake delivery messages then complete the trap. Messages about missing parcels or low re-delivery fees force users to share card details, passwords, or OTPs.
To protect yourself from these scams, pay attention to the following:
Kaspersky advises users to shop only from official apps and trusted websites and to thoroughly check web addresses before providing any details.
Treat unreal discounts and countdown timers as red flags.
Never click on links provided in suspicious messages.
Always check order and delivery status on the retailer’s or courier company’s official app.
Never pay re-delivery fees or share your OTP or password.
Always remember that you never need to provide your UPI PIN to receive payments.
Use virtual cards for online purchases and check your bank statements frequently.