(Image credit: Lucky Business / Shutterstock)

The seasonal holidays have arrived, and while many shoppers are hunting for the best deals, bad actors are also at their most active. One malicious link could be the difference between a merry and a miserable holiday.

VPNs have become an important tool in tackling scammers. Many now offer the features you need to stay safe online, whether that’s securing your internet connection while shopping online, or providing additional tools such as malicious link checkers and data breach alerts.

To get a better look at how these threats are evolving, I spoke with Norton’s VPN team at their office in Prague to discuss the best ways for users to stay safe this season

“It’s prime time to save money. But it’s also prime time for scammers to strike”

That was the key message from Norton VPN’s Product Lead, Himmat Bains. His key message is simple: whether you are facing phishing emails, text messages, or phone calls, “you must remain vigilant.”

Scams are adapting and appearing in more forms than ever before. Despite improvements to automatic scam detection on mobiles, there is still plenty of room for error.

If you see something that’s too good to be true, there’s a chance it probably is”

Himmat Bains, Product Lead, Norton VPN

According to data from NordVPN – another provider focused heavily on scam protection – the number of malicious websites increased by over 250% in the month leading up to Black Friday in 2025.

This increase in malicious sites poses a huge risk throughout the holiday season – particularly for people who ordinarily avoid online shopping or those with little cybersecurity awareness.

NordVPN’s data unsurprisingly showed that Amazon is the most impersonated site, but it isn’t the only risk. Fraudulent emails and texts often promote deals supposedly from various household brands.

“If you see something that’s too good to be true, there’s a chance it probably is,” Bains explains.

Norton’s advice

Luckily, protecting yourself against these risks is straightforward. First and foremost, use your common sense.

“If you read that someone wanted to give you a million dollars, you’d immediately think that’s a bit suspicious. Take that level of suspicion and translate it into your shopping,” Bains said.

If you are still unsure about a deal, Bains advises adopting a manual approach to ensure its legitimacy. You should type the website address directly into your browser instead of clicking on links provided in messages. While it takes slightly longer, it can save you a lot of trouble in the long run.

Often, these deals use "limited-time" countdowns to create panic, hoping you will click without thinking. “If you’re being time pressured into something, take 15 minutes and come back,” Paul DeLange, a Lead Engineer for Norton VPN said.

In those 15 minutes, you can always do some checks of your own.

In short, there are three key takeaways you should remember while doing your last-minute Christmas shopping.

• Use common sense - if a deal looks too good to be true, it probably is
• Do your own checks - just because a website claims it’s Amazon, doesn’t mean it is
• **Take your time **- don’t fall victim to time pressure, do your checks before you buy (Image credit: Anete Lusina/Pexels)

It’s worth remembering that AI is making fake websites more convincing than ever. This means it’s important to use tools alongside your own intuition to check the legitimacy of any deals you’re unsure of.

Norton’s AI Scam Protection isn’t the only solution out there if you’re worried about scams. NordVPN offers email and call protection, and Surfshark offers scam protection on emails, both of which we’ve put to the test in 2025.

No VPN threat protection systems are perfect as yet. This is why we always recommend getting separate, dedicated protection alongside a VPN to tackle issues such as malware and phishing links. That said, any of these solutions will add more protection than not having one at all.

Disclaimer

We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone using a VPN service to break the law or conduct illegal activities. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.

Sign up for breaking news, reviews, opinion, top tech deals, and more.

Rob is TechRadar’s VPN Editor. Coming from a background in phones and technology, he’s no stranger to the risks that come with putting yourself online. Over years of engaging with different platforms, testing the limits of his online persona, and feeling the brunt of several data breaches, Rob has come to gain a keen understanding of cybersecurity and the benefits of services such as VPNs in providing a secure online experience. He uses this to not only advise on the best ways to stay secure online but also share his own experiences and especially how to avoid trouble. Outside of work, you’ll find Rob on the tennis courts, in the gym, or diving into the biggest and best games of the year.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.