Holiday Scams: What to Watch For — and How to Protect Yourself This Season

The holiday season is a time for celebration, generosity, and connecting with family and friends. Unfortunately, it's also a busy time for scammers who take advantage of increased online shopping, charitable giving, and the general hustle and bustle of the season.

And scams are becoming harder to recognize. With artificial intelligence (AI), criminals can now create convincing emails, websites, and even phone calls that appear to come from people or businesses we know and trust. As Chase points out in its helpful How to Spot Scams Guide, scammers often rely on urgency, emotional pressure, and impersonation to get us to act before thinking things through.

We're not sharing this to cause alarm. Our goal is simply to help you recognize some of the tactics scammers are using and take a few practical steps to protect yourself and your family this holiday season.

Common Holiday Scams to Watch For

Fake Shopping Websites and Social Media Ads

We've all seen those holiday advertisements offering incredible discounts on popular products. But some lead to fraudulent websites designed to look nearly identical to legitimate retailers.

These fake stores may collect your payment information, send counterfeit merchandise, or never deliver anything at all.

Scammers are also using social media advertisements to reach shoppers. According to the Federal Trade Commission (FTC), shopping scams were the most frequently reported type of scam originating on social media in 2025.

How to protect yourself: Shop directly through retailers' official websites rather than clicking unfamiliar advertisements. Check website addresses carefully, look for independent reviews, and be cautious of prices that seem too good to be true. Remember that a website beginning with "https" doesn't necessarily mean the business is legitimate.

Fake Package Delivery Notifications

With so many packages arriving during the holidays, it's easy to believe a text or email claiming there's a problem with a delivery.

Scammers impersonate USPS, UPS, FedEx, Amazon, and other companies, often claiming that a package cannot be delivered until you update your address or pay a small fee.

The message may look legitimate, but the link can lead to a fake website designed to collect your credit card or personal information.

How to protect yourself: Rather than clicking the link, go directly to the retailer's website or delivery company's app to check your order status.

AI-Generated Impersonation Scams

One of the more concerning developments is the use of artificial intelligence to impersonate people and organizations.

Scammers can use AI to create realistic-looking messages, imitate voices, or produce convincing videos. Imagine receiving a call that sounds like a family member saying they're stranded while traveling for the holidays and urgently need money.

AI can also make fraudulent emails appear more professional. Poor spelling and grammar are no longer reliable signs that a message is suspicious.

How to protect yourself: If someone unexpectedly requests money or sensitive information, even if the voice sounds familiar, contact that person directly using a number you already know. Some families also establish a private verification phrase for emergencies.

Gift Card Scams

Gift cards remain popular holiday presents, but they're also a favorite tool for scammers.

Some criminals tamper with cards displayed in stores, stealing card numbers or replacing barcodes before the cards are purchased. Others impersonate employers, relatives, or businesses and ask for payment using gift cards.

How to protect yourself: Purchase gift cards directly from reputable retailers, inspect packaging for signs of tampering, and keep your receipts. Remember that legitimate businesses and government agencies won't require you to settle debts or pay fees with gift cards.

Fake Charities and Holiday Giving Scams

The holidays often inspire us to give back, and scammers know it.

Fraudsters may create fake charities, impersonate established nonprofit organizations, or use emotional stories on social media to solicit donations.

Some even create websites with names and logos that closely resemble legitimate charities.

How to protect yourself: Before donating, research the organization through resources such as Charity Navigator or Candid. Whenever possible, donate directly through the charity's official website rather than responding to an unsolicited message.

QR Code Scams

QR codes have become part of everyday life, from restaurant menus to parking meters and payment systems. Unfortunately, scammers are finding ways to misuse them.

A fraudulent QR code might be placed over a legitimate one or included in an unexpected email or package. Scanning it could direct you to a website that collects payment information or attempts to steal personal data.

The FTC issued a 2026 consumer warning about fraudulent QR codes, including those placed over legitimate parking payment codes.

How to protect yourself: Be cautious when scanning QR codes from unfamiliar sources. If you're making a payment, consider going directly to the company's official website or app instead.

Fake Fraud Alerts and Financial Institution Impersonation

This is one we particularly want our clients to be aware of.

Scammers may impersonate your bank, credit card company, or investment custodian, claiming there's suspicious activity in your account.

They may ask you to confirm a transaction, provide a one-time security code, install software, or transfer money to a supposedly safe account.

These schemes can be especially convincing because criminals may spoof phone numbers or already know some of your personal information.

As we've shared in our previous fraud alerts, Schwab will not unexpectedly ask you to disclose your password or security codes, provide remote access to your device, or move money into a "safe" account.

How to protect yourself: If you receive an unexpected call or message about your financial accounts, end the conversation and contact the institution directly using a trusted phone number. Never rely on the number provided in the suspicious message.

Unexpected Packages and Fake Toll Notices

Two additional scams worth knowing about may not seem directly related to the holidays, but they're easy to encounter during a busy travel and shopping season.

An unexpected package you didn't order could be part of a brushing scam, in which a seller uses your information to create fraudulent product reviews. Some packages also contain QR codes that lead to suspicious websites.

Fake toll notices are another concern. These text messages claim you owe a small unpaid toll and threaten additional fees or penalties unless you pay immediately.

The FTC reported in 2026 that government impersonation scam reports had increased, partly because of fraudulent toll collection messages.

How to protect yourself: Don't scan unfamiliar QR codes or click payment links in unexpected messages. If you receive a toll notice, verify it directly with the appropriate tolling agency.

Simple Habits That Can Help Protect You

While scams take many forms, they often rely on the same basic strategy: creating enough urgency or confusion that you act before taking time to verify the request.

A few habits can make a meaningful difference:

• Slow down before responding. Be suspicious of unexpected requests that demand immediate action, even when they appear to come from someone you trust.
• Use strong passwords and multifactor authentication. Unique passwords and an additional layer of account security can help protect your information.
• Be careful with links and QR codes. When in doubt, visit the company's website directly rather than following a link in a message.
• Use credit cards for online purchases. Credit cards generally offer stronger protections against unauthorized transactions than debit cards.
• Monitor your financial accounts. Review transactions regularly and consider setting up alerts for purchases, withdrawals, and account changes.
• Talk with family members. Sharing information about common scams can be especially helpful for relatives who may be less familiar with newer technology.

Don't Overlook Identity Theft

Not every scam results in an immediate financial loss. Sometimes the goal is to collect enough personal information to commit identity theft later.

Criminals may use stolen information to open credit accounts, apply for loans, access financial accounts, or impersonate you.

Warning signs can include unfamiliar transactions, credit inquiries you don't recognize, unexpected account notifications, or mail that suddenly stops arriving.

In addition to monitoring your accounts, consider placing a credit freeze with the three major credit bureaus: Equifax, Experian, and TransUnion. A credit freeze is free and can make it more difficult for someone to open new credit accounts in your name.

You can also review your credit reports at AnnualCreditReport.com.

For additional guidance, Chase provides an Identity Theft Guide with practical steps for protecting your personal information.

Eight Red Flags That Can Help You Spot a Scam

Although scams continue to evolve, many warning signs remain the same.

Be cautious when someone:

1. Contacts you unexpectedly.
2. Creates a sense of urgency or pressures you to act immediately.
3. Makes an offer that seems too good to be true.
4. Threatens legal action, account closure, or other consequences.
5. Requests payment through gift cards, cryptocurrency, or unusual methods.
6. Asks for passwords, security codes, or sensitive personal information.
7. Insists that you keep the conversation or transaction secret.
8. Discourages you from independently verifying their identity or claims.

For a helpful reference, see this 8 Red Flags to Help Identify Scams resource.

What to Do If You Think You've Been Scammed

If you suspect you've shared sensitive information or sent money to a scammer, acting quickly can help limit the damage.

Start by contacting your bank, credit card company, or financial institution through a trusted number. Explain what happened and ask what steps they recommend to protect your accounts.

Depending on the situation, you may also want to change passwords, enable multifactor authentication, place a credit freeze, and review your accounts for unauthorized activity.

You can report suspected fraud to the FTC at ReportFraud.ftc.gov or the FBI's Internet Crime Complaint Center. If your identity has been compromised, IdentityTheft.gov can help you create a recovery plan.

And if something suspicious involves your investment accounts, please contact our office so we can help you determine the appropriate next steps.

A Little Awareness Goes a Long Way

The holidays are busy enough without worrying about scams. Fortunately, protecting yourself doesn't have to be complicated.

Taking an extra moment to verify a message, question an unusual request, or talk with a family member can make a meaningful difference.

At Birch Street, helping our clients protect their financial well-being is just as important as helping them plan for the future. We hope these reminders help you enjoy the holiday season with a little more peace of mind.