If you like completing any of your holiday shopping online, make sure you’re aware of the risks of phishing attempts so you don’t become a victim of credit card fraud. With more people shopping and looking for hot deals at this time of year, consumers might not be as sceptical as they would otherwise be when it comes to clicking links in emails.

Let’s have a quick refresher on what phishing attempts are and what you can do to keep your credit card information and other personal information safer while you finish your holiday shopping online.

What is Phishing?

A phishing attempt is when a scammer gets you to click a link to Site A by convincing you it really will take you to Site B. When you visit the site, it asks for your personal information (passwords, usernames, credit card details, etc.).

For example, let’s say you have a Citibank Personal credit card. You regularly log in to check your account information online. A scammer might then send an email to you, making it look like it’s an official email from Citibank. That email would include a supposed login link, telling you to log in and update some out of date information. The site the link takes you to even looks like the Citibank site. But it’s really spoofed — designs and email addresses can both be. You log into the fake site, and now the scammer has your real account login details for your Citibank credit card account.

Another example would be a fake email from a retailer you like, announcing a great sale. In that case the idea is to take you to a fake site where you’ll enter your credit card information because you think you’re making a legitimate purchase.

How to Avoid Becoming a Victim of Online Phishing Attempts

Here are three tips to help you avoid becoming a victim of this type of phishing:

1.    Always hover your mouse pointer over links in emails before clicking, and check the status bar at the bottom of your email program or browser window. They usually show the URL (Web address) the link will take you to before you click. Make sure the address showing there will really take you to the website it says it will and not just one made to look like it.

2.    If you aren’t sure about the URL you see, manually visit the website’s homepage instead of clicking a link to get there. Navigate your way to the deal mentioned or to your usual login page.

3.    Never enter credit card information on any website unless it’s secure. You can tell it’s secure if the URL starts with https:// instead of http:// in the address bar or if you see the common padlock icon browsers generally display on secure pages. This is sometimes located near a bottom corner of your browser window.

Remember that phishing attempts don’t happen exclusively around the holidays, and that “holiday shopping” extends beyond those holidays. For example, all of the gift cards and prepaid credit cards given as Christmas gifts might then be used to make online purchases in the New Year. So stay alert and always know who you’re giving your personal information to, no matter where you shop or how you get there.

Don’t let your enthusiasm for holiday shopping cause you to be reckless with your personal information. Be extra cautious about deals and urgent requests in emails where the email wants you to login or visit a site to make a purchase. A little bit of common sense can go a long way toward protecting you from credit card fraud. And no one wants to start off the New Year dealing with that kind of headache.