Hot Sale 2025: What are the most common scams and how to protect yourself?

More and more users are shopping online , a trend that increases during promotional periods like Hot Sale . But while businesses prepare to sell more, cybercriminals are attacking. They also organize to take advantage of the volume of transactions. Cybersecurity companies warn of a variety of scams targeting both buyers and sellers.

One of the first places these scams can start is Google . Although it's not a sales platform, many people use it to search for products, compare prices, and access online stores.

However, ESET warns that fake sites often appear in the first results, often promoted through paid ads that simulate legitimate pages. The key is to carefully review the URL and be wary of offers that seem too good to be true.

Palo Alto Networks, another cybersecurity firm, detected domain squatting campaigns during mass consumer events, such as Black Friday . This tactic involves registering domains with names very similar to those of well-known brands to deceive users and redirect them to malicious sites or phishing forms.

The situation is repeated on e-commerce platforms such as Mercado Libre, Amazon, and AliExpress. Although these sites have protection mechanisms, scammers send fake emails pretending to be official communications, warning about alleged security issues, sweepstakes, or special promotions. The goal is the same: to steal personal or financial data through deception.

Small or independent online stores also pose a potential risk. Users often trust startups or businesses that operate from their own sites, unaware that these sites may have been compromised by attackers.

According to ESET, vulnerabilities in plugins, site configurations , or even infections with skimmer-type malware can allow the theft of credit card data and other sensitive information.

To reduce this risk, experts recommend doing a little research on the site before purchasing: look for external reviews, check that the connection is encrypted (HTTPS), and opt for prepaid or virtual cards. While they don't completely eliminate the possibility of fraud , these measures help limit the consequences if something goes wrong.

Facebook Marketplace, for its part, presents a unique case. While it allows direct interaction with sellers' profiles, this proximity can create a false sense of security.

It's common to find that the delivered product doesn't match the photos or simply never arrives. Fake sweepstakes and links pretending to be from the platform are also circulating to capture personal information.

ESET suggests applying a simple rule: if a product costs much less than other stores, it's probably not a one-off opportunity, but a scam. They also recommend not agreeing to continue the transaction outside the platform, as this voids any endorsement or subsequent claims.

Despite the risks, online shopping is still safe if you take the proper precautions. “The advantages of online shopping are beyond dispute, but it's also true that there are many forms of deception,” warns Camilo Gutiérrez Amaya, head of the ESET Latin America Research Lab.

"And since the idea is for everyone to enjoy the benefits of online shopping, being informed allows us to be more vigilant and take the necessary precautions."

The company recommends being wary of unexpected emails, checking the web addresses of payment sites, and never sharing personal information outside of official channels. They also suggest using security software with browsing protection and secure payment features.

Kaspersky, for its part, reported that in the first ten months of 2024 it blocked more than 38 million phishing attempts linked to e-commerce platforms.

In Latin America, many of these campaigns mimicked Mercado Libre, Amazon , and other online payment services. The report highlights the sustained growth of digital fraud during seasonal consumption peaks.

The experts' conclusion is unanimous: e-commerce is here to stay, but digital education and the use of protection tools must grow alongside it.

On the internet, as in real life, caution is still the best defense. If an offer seems too good to be true, it probably isn't real and is a scam.