Black Friday tips to stay safe and avoid scams while shopping online
The threat of fraud and cyber scams is a 365-days-a-year problem when it comes to online shopping.
But just as the rate at which retailers hit you with promo emails scales up at this time of year, so too does the risk of falling foul of criminals trying to access your bank account.
According to the National Cyber Security Centre (NCSC), shoppers lost more than £10m to cyber criminals over last year’s festive shopping period.
With Black Friday sales under way and Christmas on the horizon, Sky News enlisted some cybersecurity experts to offer advice on how best to stay safe and avoid scams this year.
Spotting a dodgy email
A favourite tactic of fraudsters is to draw you in with an email that looks remarkably legitimate, seemingly offering an exclusive deal at one of your favoured retailers.
It is, as Mike McLellan of Secureworks puts it, a “classic scenario we’d expect to see around Black Friday”.
An important thing to look out for is the domain name of the sender’s email address – is it a close match, but with something slightly off? Think @amaz0n.co.uk, for example.
“On smartphones, that kind of detail is usually hidden,” advises Mr McLellan. “So tap on it and check where the email has come from.”
You should also keep an eye out for misspellings and odd formatting.
However, the NCSC has warned that criminals are likely to use increasingly accessible AI tools to produce even more convincing scam emails, websites, and adverts than usual.
If you’re at all unsure, it’s good practice to go to the website directly, rather than click on any links in the email.
Fake websites
Some scams may direct you to a retailer’s login page to enter your account information.
It could look perfectly normal, and you go ahead and pop in your username and password, while in the background, criminals capture that information and use it themselves.
Chris Bluvshtein, of VPNOverview, says: “Every website should have a valid security certificate, and you can tell by the little padlock icon next to the URL.
“If a website doesn’t have one of these, then don’t give your bank details or valuable information.”
These can be some of the hardest scams to notice yourself, but banks have become very good at alerting you to “unusual logins” and flagging any subsequent dodgy transactions.
“If you suspect something bad has happened, consider changing your password,” Mr McLellan says. “And checking your bank activity.”
Text message scams
Another classic of the Black Friday scam genre is a text message suggesting you have a parcel waiting with DHL, Royal Mail, or some other delivery provider.
“Quite often you will be expecting something when you get these texts – but again keep an eye out for anything that doesn’t look normal,” says Mr McLellan.
A good indicator that something is amiss is if the text asks you for payment and includes a bit.ly link.
You should not click on these.
An example of a text message scam. Pic: Royal Mail
The rise of ‘Qishing’
An emerging threat over the past year is an extension of phishing using QR codes.
Secureworks has dubbed it “Qishing”, when criminals use them to direct unsuspecting consumers to fraudulent websites that could steal their personal information.
Director of threat intelligence, Rafe Pilling, says: “We’re so used to seeing ‘scan this code’ to register, view a menu, order drinks or food to a table, or even enter competitions via the big screen at events stadiums, that consumers are thinking less about what they’re actually scanning.
“As the hype around holidays like Black Friday drives more urgency in consumer actions, we can expect to see more cyber criminals taking advantage with Qishing.”
Password managers and mobile payments
Modern smartphones and web browsers offer some useful baked-in features to help you stay safe.
Both have password managers and generators, which will come up with randomised options for you to lock your accounts and then store those behind a master password – or even biometrics like facial or fingerprint recognition.
Consider multifactor authentication as well, says Mr McLellan, for an extra layer of security.
Apple and Google Pay are good payment options if the retailer accepts them, as they protect your bank details.
“It’s best to use them instead of your debit card,” says Mr Bluvshtein.
Read more science and tech news:
How chaos unfolded at OpenAI
Heart of Milky Way captured for first time
UK to build new satellite to monitor climate change
Set up facial recognition on your phone and use it to protect your passwords
Avoid shopping on public networks
Black Friday promotions will often try to entice you with limited time deals, alerting you to them via an app notification, text message or email.
If one arrives while you’re out and about, it could be tempting to jump straight to it.
But shopping on public wi-fi networks, like those you might find at railway stations and on trains, is a bad idea, according to Mr Bluvshtein.
“Public wi-fi rarely has safety protocols such as passwords in place, and hackers can piggyback and steal unsecured banking details and sensitive information without you knowing,” he says.
What to do if you suspect you’ve been scammed
Even with the best will in the world, there may come a moment where you suspect the worst.
But try not to fret – there are steps you can take to limit the damage, or prevent any from occurring at all.
“Keep an eye on bank accounts and if you see anything unusual, get in touch with them,” says Mr McLellan.
“Banks have got very robust fraud controls these days – and that’s why it’s best to use credit cards if possible.
“If you think any of your online accounts have been compromised, change the password, and try not to reuse them across different retailers.
“We do recognise that some of these have a technical bar to them, but if nothing else, at least keep an eye on what’s happening and be vigilant about your online activity.”
UK
Family of man who committed murder after escaping from mental health unit say they were ‘failed’ by NHS trust
The family of a man who committed murder during an escape from a secure mental health unit have told Sky News they were “failed” by the trust that was meant to be caring for him.
Joshua Carroll is currently waiting to be sentenced for the murder of Headley Thomas, known as Barry, after beating him to death in a park in Trafford, Manchester, in September 2022.
At the time of the attack, Joshua was in the care of Greater Manchester Mental Health Trust (GMMH). He was being treated as an inpatient at Park House, a unit which has now closed down.
Joshua’s mum and sister say he escaped from the unit 21 times – and they repeatedly complained to the trust and asked for help.
Headley Thomas, who was known as Barry
Leanne Carroll, Joshua’s sister, told Sky News: “The night it happened, Joshua had come to my house. And it was just a normal ‘oh Joshua has escaped from hospital again’. Nothing appeared any different.”
She says they didn’t find out about what had happened until Joshua was arrested weeks later – and “everything fell apart from there”.
Julie and Leanne Carroll
“My heart broke,” said Joshua’s mum, Julie Carroll. “It’s just a horrible, horrible situation.”
Joshua had been diagnosed with conditions including schizoaffective disorder, and had been in and out of inpatient care for around 15 years, his family said.
They showed me more than 20 pages of complaints and responses from GMMH about his repeated escapes, dating back eight years before the murder.
After Joshua’s fourth escape from Park House, his family asked for him to be moved to another unit, saying they were concerned about security.
This didn’t happen, with the trust citing capacity issues. His family complained once again about his escapes just five weeks before the murder, in August 2022.
“We are very, very angry and disappointed,” said Julie. “You think if your child is in hospital, and they are very poorly, that they are going to be looked after – they will be safe and they will be secure. But that wasn’t the case for Josh.”
Julie Carroll says her “heart broke” after her son’s crime came to light
Although Joshua was convicted of murder, Leanne says his family hold GMMH partly responsible.
“If you had done your job properly – none of this would have happened,” she said. “Two families wouldn’t have been destroyed and so many hearts wouldn’t have been broken.”
Since 2022, GMMH has been served with several Section 29A warning notices by the Care Quality Commission. These are issued when the commission decides a service needs to make significant improvements, and there is a risk of harm.
In the case of GMMH, their concerns included “ward security systems not consistently keeping people safe”.
Dr John Mulligan is a clinical psychologist for GMMH, working in the community for the early intervention in psychosis service, and a representative for the union Unite.
Dr John Mulligan
He and his colleagues have been going on strike repeatedly across the past seven months, saying they just don’t have the staffing levels they need to keep people safe.
“Thankfully, violent incidents among our service users are quite rare, they are much more likely to be the victims of violence and aggression,” he said. “But serious incidents are happening regularly. Far too regularly.
“It’s very upsetting for staff and for patients and families.”
Joshua Carroll . Pic: Greater Manchester Police
Salli Midgley, chief nurse at the Greater Manchester Mental Health NHS Foundation Trust said: “On behalf of GMMH, we express our heartfelt condolences to Headley Thomas’s loved ones at this very sad time.
“Our thoughts and sympathies remain with everyone who has been affected by this most devastating incident. We are deeply sorry that it happened while Joshua Carroll was under our care.
“Under the trust’s new leadership, we have been working closely with NHS England, our commissioners and the CQC to create better, safer and well-led services for all.”
The Carroll family asked for Joshua to be moved to a different unit after his escapes
She continued: “A huge amount of progress has already been made but we know we still have a lot to do to improve our services.
“As part of this work, we are currently carrying out an in-depth investigation into the care and treatment provided to Mr Carroll, and the circumstances leading to Mr Thomas’ death, the findings of which will be shared with NHS England.
“We are unable to comment further on this case whilst the investigation is ongoing.”
Barry Thomas’s family told Sky News mental health is a very serious issue – but they believe Joshua Carroll tried to “play down his actions”.
They said: “Let’s all remember that a life was taken. Our brother, father, and uncle. The evidence the police gathered was in plain sight for all to see.
“We, the family, would like to thank all the police involved for the work they have done, in bringing justice for Barry.”
UK
Hashem Abedi: Manchester bomb plotter moved back to Belmarsh prison after guards attacked in jail in Durham
The Manchester Arena bomb plotter Hashem Abedi has been moved back to Belmarsh prison after an alleged attack at HMP Frankland on Saturday.
Three prison officers at the high-security jail in County Durham were attacked with cooking oil before being stabbed with an improvised weapon.
Abedi has been transferred to Belmarsh prison in southeast London where he’d previously been found guilty of attacking a prison officer in 2020, along with two other convicted terrorists.
Belmarsh is considered the most high-security prison in the UK.
Abedi has been moved to the only available highly-controlled ‘suite’ cell in the country – a standalone self-contained unit monitored by a minimum of five people at any one time, and a prison dog.
There are only four such cells across England and Wales.
Abedi was convicted of assisting the Manchester terror plot, in which his brother Salman Abedi killed himself and 22 other people by detonating a bomb in a rucksack at an Ariana Grande concert in May 2017.
Hashem Abedi was sentenced in 2020 to at least 55 years in prison after being found guilty of 22 counts of murder over the atrocity.
Salman Abedi before the concert attack. File pic: PA
Meanwhile, the government has said it will commission a review into the incident at HMP Frankland, after suspending access to cooking facilities in separation units, which is where the alleged attack took place.
Sky News understands the Prison Officers Association, after visiting staff who were on duty at the category A jail this week, have written to Prime Minister Sir Keir Starmer calling for urgent action in order to protect prison staff in the high-security estate.
The union wants to see prison officers working there given stab-proof vests, access to tasers in certain situations, and not just a suspension of self cooking facilities in separation units but a full ban.
Separation units house the country’s most dangerous and violent criminals.
Read more from Sky News:
‘Likely’ British Steel will be nationalised, says business secretary
Ukrainian forces ‘strike Russian brigade’ behind Sumy missile attack
Belmarsh prison in southeast London. File pic: PA
There have been a series of violent attacks across prisons in England and Wales, only days apart.
On Sunday, convicted killer John Mansfield was found dead at a category A prison, HMP Whitemoor, in Cambridgeshire. Police said they arrested a 44-year-old man on suspicion of murder.
Sky News also understands there was an incident on Tuesday lunchtime at HMP Lowdham Grange in Nottinghamshire.
A specialist ‘response group’ consisting of officers from outside the prison were deployed to bring the situation under control, along with a ‘hostage’ situation, while prisoners climbed on the roof and netting. The situation was brought under control within an hour.
Prisons minister Lord Timpson said it was “another sign of the problems we are facing in our prison with prisons that are overcrowded and violent”.
-
Sports2 years ago‘Storybook stuff’: Inside the night Bryce Harper sent the Phillies to the World Series
-
Sports1 year agoStory injured on diving stop, exits Red Sox game
-
Sports1 year agoGame 1 of WS least-watched in recorded history
-
Sports2 years agoMLB Rank 2023: Ranking baseball’s top 100 players
-
Sports4 years ago
Team Europe easily wins 4th straight Laver Cup
-
Environment2 years agoJapan and South Korea have a lot at stake in a free and open South China Sea
-
Environment2 years agoGame-changing Lectric XPedition launched as affordable electric cargo bike
-
Business3 years agoBank of England’s extraordinary response to government policy is almost unthinkable | Ed Conway