With online purchases and digital transactions rising during India’s festive season, cybersecurity experts urge consumers to verify offers, protect credentials and pause before making payments.
As India’s festive shopping season drives a surge in online purchases and digital payments, cybersecurity firm SecurEyes has warned consumers and businesses to remain alert to scams involving fake shopping portals, phishing links, QR codes and impersonation.
Karmendra Kohli, Co-Founder and CEO of SecurEyes, said cybercriminals exploit festive excitement, time-limited offers and rushed purchasing decisions to deceive shoppers. Citing Karnataka Home Minister G. Parameshwara, the company noted that Karnataka lost more than ₹2,000 crore to cyber fraud in 2025, underscoring the scale of the threat.
Common scams include SMS, email and WhatsApp messages promoting fake gift cards or exclusive discounts that redirect users to websites designed to steal banking credentials and UPI PINs. Fraudulent e-commerce portals may imitate established retailers, advertise unusually steep discounts and disappear after receiving payments.
“Vigilance remains our strongest shield against digital threats. Cybersecurity isn’t just a technical layer; it is built on simple, daily digital habits.” — Karmendra Kohli, Co-Founder and CEO, SecurEyes
Attackers also impersonate bank officials, delivery agents and customer-support representatives, using fabricated account or delivery problems to pressure victims into sharing one-time passwords (OTPs) and other confidential information. Deceptive QR codes can trick users into authorising payments instead of receiving cashback or rewards.
SecurEyes advises shoppers to access retailers through official apps or verified website addresses rather than unsolicited links. Consumers should scrutinise domain names, question implausibly large discounts and never disclose OTPs, PINs or card details to callers or messaging contacts claiming to represent legitimate institutions.
The company also recommends enabling multi-factor authentication across banking, shopping and personal accounts.
Beyond technical safeguards, SecurEyes emphasises a simple response to suspicious activity: pause, verify and report. By resisting artificial urgency and independently checking transaction requests, consumers can reduce the risk of financial loss during the festive season.