The sophistication of holiday fraud has reached new heights this year due to the widespread use of Artificial Intelligence (AI). While the holiday spirit is about generosity and trust, your approach to shopping this season should be one of verification.

Here’s how to protect your personal information in the 2025 holiday landscape.

1. Spotting Fake Retailer Websites

The most common scam this season is Lookalike Websites. Scammers create high-quality replicas of popular brands (like Lululemon, Aritzia, or Best Buy) and promote them with massive discounts via Instagram and TikTok ads.

The fix: Always verify the site

• Inspect the URL:  Look for subtle misspellings (e.g., Amzn.com instead of Amazon.com) or strange domain extensions (e.g., .shop or .net instead of .ca or .com).
• Check the Domain Age: If a major retailer’s website was registered only last month, it is a scam.
• Go Direct: Never click a Flash Sale link in a social media ad. The best approach is to open your browser and type the store’s address yourself.

2. The Incomplete Address Text (Smishing)

Shipping scams have evolved from email to SMS. You may receive a text appearing to be from Canada Post, UPS, or FedEx stating that a package cannot be delivered due to an incomplete address or an unpaid customs fee, often for a tiny amount, like $1.25.

These texts link to clone websites designed to capture your credit card details.

The fix: Legitimate carriers will not text you from a random phone number to demand a fee to release a package. If you are unsure, do not click the link. Go to the carrier’s official app and enter your tracking number there.

3. Inspect physical gift cards for draining

Buying gift cards at the grocery store is a holiday staple, but card draining has become an increasing threat in Canadian retail.

Fraudsters steal inactive cards from store racks, carefully slice open the packaging to record the numbers and PINs, reseal them, and place them back on the shelf. When you load the card, software instantly alerts the scammer, who drains the funds before your recipient even opens the envelope.

The fix:

• Before purchasing, run your finger over the back of the card packaging. If it feels bumpy, sticky, or looks like it has been tampered with, do not buy it.
• Whenever possible, buy digital gift cards directly from the retailer’s official website.

4. Watch out for Quishing (QR Code Phishing)

QR codes are everywhere, from parking meters to restaurant menus, but they bypass many traditional security filters. This season, watch out for malicious QR codes pasted over legitimate ones on parking machines or charity donation bins.

Scammers also send QR codes via email, often hidden in shipping confirmation images, because email security scanners often cannot read the image. 

The fix: Treat a QR code like a suspicious link: if you don't know exactly where it goes, don't scan it.

5. AI voice cloning and the Grandparent Scam

The "emergency call" from a relative claiming to be in trouble has become terrifyingly realistic. Using AI tools, scammers can clone a loved one’s voice from a short social media video to make these calls sound authentic.  

The fix: Establish a safe word with your family offline before this happens. That way if the caller cannot provide the word, it’s a scam. If you receive a panicked call asking for money, hang up immediately and call the person back on their known, saved phone number.

6. Job scams have moved to Tasks

During the holidays, many Albertans look for extra income. Be wary of task scams recruiting via WhatsApp or Telegram. These scams claim you can earn money by optimizing apps or rating hotels.

They often start by paying you a small amount to gain trust, then require you to deposit cryptocurrency to unlock higher-paying tasks. No legitimate employer will ask you to pay money to get paid.

The fix: Don’t respond to unsolicited job offers. Don’t assume a communication is safe just because it looks professional or uses the right logo.

Ensure security

• Set up two-factor authentication on all your online accounts.
• Set up auto-deposit for e-transfers. Auto-deposit eliminates the opportunity for a scammer to intercept an email and redirect the deposit to another bank.
• When shopping or donating online, look for the little padlock icon on your browser next to the search bar. You should also see https:// in the website address. These indicate that the site is secure.
• Install and regularly update anti-virus and malware software on all your devices.

Protect your data

• Never enter personal information that isn’t relevant to the purchase you’re making. Question when a website asks for information like your social insurance number or online banking password.
• Never save your credit card or payment information on a retailer’s website. Enter it each time you make a purchase.
• Don’t click on links in an email or text message from an unknown sender.

Read terms and conditions

• Review the terms and conditions when making online purchases.
• Make sure you aren’t unknowingly signing a contract for an on-going subscription to a product or service.
• Confirm that your email or phone number will not be added to a list or shared with third-parties.
• Check that the warranty is fair and not limited.

For more information, check the government’s website to learn about recent frauds and scams, and what to do if you experience fraud. You can also learn more about the top scams to look out for.

Your best defence against holiday scams is education. Look out for potential warning signs of fraud and do your research while shopping online to enjoy peace of mind this holiday season.