As festive sales light up shopping apps and inboxes, so do scam alerts. Seen a pop-up from Amazon offering “free Diwali gifts” for taking a quiz? Or a message from “India Post” claiming your delivery failed and linking to an “address update”? These are among the season’s most common scams, designed to dupe hurried shoppers.“With festivals such as Diwali, Dhanteras, and Christmas around the corner, people have been rushing to grab limited-time deals. Shoppers look for festive sales but often click on a link first and verify its authenticity later,” said Srinivas L, Joint MD and Joint CEO of 63SATS Cybertech. “Cybersecurity teams have alerted people to these festival-focused shopping baits. Polished logos and fake testimonials make a counterfeit e-commerce site convincing for shoppers. These websites offer prices that are always ‘too good to be true’ and can entice buyers,” he added.Speaking to indianexpress.com, Rakesh Bakshi, vice president, legal, Amazon India, said, “Scam attempts typically increase during the festive season as shopping volumes rise. These bad actors mostly operate outside Amazon — through fake emails, texts, or calls — impersonating brands to create urgency. The most common scams involve fake ‘order’ or ‘account’ issues, where fraudsters claim your account is suspended or an order needs payment verification, pushing customers to click harmful links or share credentials.”“Over the past year, we blocked more than 55,000 phishing websites and 12,000 scam phone numbers. We have also partnered with the Indian Cyber Crime Coordination Centre (I4C) to spread scam-awareness messages ahead of the festive season,” he said, adding that they are focused on using advanced technology, proactive safeguards, and education to help customers shop with confidence.How do festive sale scams work?“Scammers often create fake shopping websites or online ads that closely mimic popular brands like Amazon or Flipkart,” said cybersecurity expert Shubham Singh. “They attract shoppers with unbelievable discounts and limited-time offers. Once a customer places an order and makes a payment, they either receive counterfeit products or nothing at all.”Singh also said, “What makes these scams so convincing is their attention to detail. The fake websites often use official brand logos, product images, and polished designs that look identical to legitimate sites. Some even clone the real website’s layout and domain name, making it extremely difficult for shoppers to tell the difference.”Red flags:– Odd or misspelled URLs (e.g. amaz0n-sale.com)– Missing ‘https://’ or padlock icon before the addressStory continues below this ad– Links in SMS, WhatsApp, or emails asking for logins or payments– Prices that seem too good to be true– Poor grammar, fake reviews, or missing contact details– Only online payment options, no Cash on Delivery– Urgent messages like “account suspended” or “order needs verification”– Requests for OTPs, passwords, or card details (Amazon never asks for these)What to do if you suspect a scam“If customers suspect a scam, we advise that they pause and verify. If they are shopping on Amazon, the safest step is to check the ‘Your Orders’ section in the shopping app or on amazon.in. If it’s not listed there, it’s not real,” said Bakshi.“People still fall for these scams despite repeated warnings and awareness drives because scammers play with emotions and urgency. People get excited about discounts and offers. Fake sites look just like the real ones, and there’s pressure to buy fast before the deal ‘ends’. Many people still don’t double-check websites before paying,” said Singh.Story continues below this adBakshi also said that the safest way to shop is to begin and end your journey only on the official app or website. “The ‘Your Orders’ tab is the single most reliable source for order updates and delivery status.”For scams impersonating Amazon, he clarified:– All official emails come from addresses ending in “@amazon.in” or “@amazon.com”.– SMS updates never ask for personal details or payment info.– The Protect & Connect microsite explains common scams and includes simple fraud-recognition quizzes.– Customers can enable Two-Step Verification for added safety.– Suspected scams can be reported to stop-spoofing@amazon.com.If you’ve already paid on a fake site: – Call your bank immediately and block your card or UPI account.– Report the scam at cybercrime.gov.in.– Keep screenshots and payment proofs.– Call the financial fraud helpline at 1930.– Warn others to prevent more victims.“Quick reporting protects you and helps prevent others from being targeted. And remember — if an order, message, or offer isn’t visible in your Amazon account, it isn’t real,” said Bakshi.Story continues below this adAmazon has launched #ScamSmartIndia with the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs, and collaborates with the CBI, state police, and cybercrime cells for awareness and investigation training. It also works with FICCI’s CASCADE committee and IIT Delhi on digital safety initiatives.“Mobile cybersecurity applications like CYBX alert you to phishing links in real time and protect you. It also offers India’s first mobile cybersecurity insurance coverage for such financial losses,” said Srinivas L.This festive season, staying alert, verifying every deal, and pausing before you pay can ensure your celebrations stay scam-free.