(Image credit: Lucky Business / Shutterstock)

The seasonal holidays have arrived, and while many shoppers are hunting for the best deals, bad actors are also at their most active. One malicious link could be the difference between a merry and a miserable holiday.

VPNs have become an important tool in tackling scammers. Many now offer the features you need to stay safe online, whether that’s securing your internet connection while shopping online, or providing additional tools such as malicious link checkers and data breach alerts.

To get a better look at how these threats are evolving, I spoke with Norton’s VPN team at their office in Prague to discuss the best ways for users to stay safe this season

“It’s prime time to save money. But it’s also prime time for scammers to strike”

That was the key message from Norton VPN’s Product Lead, Himmat Bains. His key message is simple: whether you are facing phishing emails, text messages, or phone calls, “you must remain vigilant.”

Scams are adapting and appearing in more forms than ever before. Despite improvements to automatic scam detection on mobiles, there is still plenty of room for error.

If you see something that’s too good to be true, there’s a chance it probably is”

Himmat Bains, Product Lead, Norton VPN

According to data from NordVPN – another provider focused heavily on scam protection – the number of malicious websites increased by over 250% in the month leading up to Black Friday in 2025.

This increase in malicious sites poses a huge risk throughout the holiday season – particularly for people who ordinarily avoid online shopping or those with little cybersecurity awareness.

NordVPN’s data unsurprisingly showed that Amazon is the most impersonated site, but it isn’t the only risk. Fraudulent emails and texts often promote deals supposedly from various household brands.

“If you see something that’s too good to be true, there’s a chance it probably is,” Bains explains.

Norton’s advice

Luckily, protecting yourself against these risks is straightforward. First and foremost, use your common sense.

“If you read that someone wanted to give you a million dollars, you’d immediately think that’s a bit suspicious. Take that level of suspicion and translate it into your shopping,” Bains said.

If you are still unsure about a deal, Bains advises adopting a manual approach to ensure its legitimacy. You should type the website address directly into your browser instead of clicking on links provided in messages. While it takes slightly longer, it can save you a lot of trouble in the long run.

Often, these deals use "limited-time" countdowns to create panic, hoping you will click without thinking. “If you’re being time pressured into something, take 15 minutes and come back,” Paul DeLange, a Lead Engineer for Norton VPN said.