Stay cyber-savvy this festive season

Online scams surge during the festive season. In South Africa, online shopping fraud increased by nearly 20% in 2024, according to SABRIC, with phishing attacks, fake courier notifications, and fraudulent retail sites becoming even more sophisticated during Black Friday and the holidays.

To help you navigate this heightened risk, we asked Samantha Rule, Ninety One’s Chief Information Security Officer (CISO), to share her expert guidance. With over 20 years of experience in cybersecurity, a background in digital forensics, and IT risk, including leading Ninety One’s global information security programme, Samantha has seen how simple digital habits can protect both your personal information and your financial wellbeing.

Here are her top ten tips to stay cyber-secure this festive season.

01 Think before you click

Fraudsters thrive on urgency and emotion, often using tempting offers or fake alerts to prompt a quick reaction.

• Be cautious of unsolicited messages. Pause before clicking on any link or attachment, even if it appears to come from a familiar brand or bank.
• Hover over links to verify their destination.
• Never share your passwords, PINs, or one-time passwords (OTPs) via email, SMS, or phone.
• If something feels off, it probably is – trust your instincts and verify through official channels.
• Report suspicious activity to your bank or IT team; every report strengthens the ‘human firewall’, helping protect everyone.

02 Own your digital footprint

Your online presence is powerful, and so are the risks that come with oversharing.

• Avoid posting personal details, such as travel plans or financial milestones.
• Use unique, complex passwords for each account, and never reuse your work credentials elsewhere.
• Regularly review privacy settings on social platforms to control who can see your information.
• Keep personal and work emails separate.
• If you notice unusual activity in an account, act fast: change your password and enable extra security checks immediately.

03 Protect your devices

Your phone and laptop are your digital wallets – treat them as such.

• Keep antivirus and system software updated.
• Only download apps from official app stores.
• Turn off Bluetooth and Wi-Fi when not in use.
• Back up your data regularly because ransomware and theft can strike in seconds.
• Never leave devices unlocked or unattended in public spaces.

04 Shop smart online

Festive shopping attracts both great deals and fake stores.

• Shop from trusted retailers or official apps.
• Look for subtle misspellings or extra characters in website URLs.
• Avoid clicking through shopping links in emails or on social media ads; instead, navigate directly to the retailer’s website.
• Do not save your card details online unless necessary.

05 Use secure payment methods

Your payment method is often the last line of defence.

• Use virtual or single-use cards when available.
• Enable real-time transaction alerts.
• Credit cards generally offer stronger consumer protection than debit cards.
• Avoid entering payment information on shared or public devices.

06 Watch out for courier and delivery scams

This is one of the fastest-growing festive-season scams.

• Validate delivery notifications directly through the retailer’s website or official courier app.
• Be cautious of messages claiming you owe a small ‘additional fee’.
• Do not share personal details or addresses via WhatsApp or SMS from unknown numbers.

07 Stay alert on social media

Social media platforms influence many online purchases, and scammers are aware of this.

• Verify the legitimacy of deals promoted by influencers or ads.
• Check independent reviews (not just social comments).
• Be wary of pressure tactics such as ‘only 5 minutes left!’ or ‘limited stock’.

08 Prepare your family

Households often experience an increase in digital activity at this time of year.

• Talk to your children about safe online behaviour, especially in games or apps that involve in-app purchases.
• Consider using parental controls for spending and app downloads.
• Remind family members not to share personal data or passwords with others.

09 Be aware of AI-driven scams

Scammers now use AI to create convincing voices, messages, and fake support chats.

• If someone claims to be from your bank or an online retailer, hang up and call back using an official telephone number.
• Be aware when someone sounds ‘almost but not quite’ like a known person.

10 Be festive, but remain vigilant

The season is about joy and connection, not cybercrime.

• Pause before you click, pay, or post.
• Adopt small digital habits that protect your information and financial wellbeing.

Download PDF