Black Friday turns into spam week: 10% spike in phishing emails
As online shoppers gear up for Black Friday bargains, email provider mail.com highlights an often-overlooked downside of the season: a 10% rise in spam and phishing emails. The sharp increase during Black Friday week reflects how scammers exploit the seasonal shopping rush.
The increase is no coincidence: Phishing scams are particularly effective during Black Friday week, explains Arne Allisat, Head of Email Security at mail.com. “Everyone is on the hunt for the best deal – they don’t want to miss out on a bargain. This creates emotional pressure. In the rush, users often get careless and may not look closely before logging into their shopping accounts via an email link. That’s when the trap snaps shut.”
When victims enter their username and password through a phishing email link, the credentials go straight to cybercriminals. These stolen credentials are often used not just for fraudulent purchases but increasingly for identity theft, where criminals create new accounts in the victim's name.
Another ongoing trend is fake package notifications. These emails mimic messages from delivery services like FedEx, UPS, or USPS, claiming that a package is stuck at customs or requires a processing fee. Clicking the link often results in stolen payment details, bank credentials, or login information for accounts like PayPal.
Additionally, the provider significantly tightened its security checks in the summer of 2024. Arne Allisat, Head of Email Security, explains: “We are currently implementing a stricter ‘Reject and Defer’ policy. This means our spam filters – essentially the gatekeepers for email inboxes – rigorously reject or at least delay suspicious emails. This allows us to block the vast majority of spam and phishing attacks right from the start, protecting our users in the process.”
When victims enter their username and password through a phishing email link, the credentials go straight to cybercriminals. These stolen credentials are often used not just for fraudulent purchases but increasingly for identity theft, where criminals create new accounts in the victim's name.
The Latest Trends: Gift Card Scams and Fake Package Notifications
Among the most prevalent spam and phishing tactics during Black Friday week 2024 is gift card spam. Scammers send fake gift card offers supposedly from major online retailers like Amazon. Victims are instructed to log in through a provided link to redeem the offer – immediately exposing their credentials to attackers.Another ongoing trend is fake package notifications. These emails mimic messages from delivery services like FedEx, UPS, or USPS, claiming that a package is stuck at customs or requires a processing fee. Clicking the link often results in stolen payment details, bank credentials, or login information for accounts like PayPal.
AI and a Strict Gatekeeping Policy
To combat the flood of spam, mail.com employs a range of methods. First, its filtering systems are now trained using artificial intelligence. AI helps quickly identify characteristics and patterns in suspicious emails, enabling early warnings before a specific wave of spam arrives.Additionally, the provider significantly tightened its security checks in the summer of 2024. Arne Allisat, Head of Email Security, explains: “We are currently implementing a stricter ‘Reject and Defer’ policy. This means our spam filters – essentially the gatekeepers for email inboxes – rigorously reject or at least delay suspicious emails. This allows us to block the vast majority of spam and phishing attacks right from the start, protecting our users in the process.”
Safe Online Shopping Tips
While most harmful emails are intercepted before reaching inboxes, extra caution is advised during Black Friday. mail.com recommends the following precautions:- Check plausibility: Did you actually order something from the company the email claims to be from?
- Inspect the sender's email address: Typos in the subject line or message text can be red flags. Legitimate emails from trusted senders—such as system messages from mail.com—can be identified by a blue checkmark next to the sender's name.
- Avoid clicking login links in emails: Even urgent messages from retailers, shipping services, or payment providers can be phishing attempts.
- Navigate directly to the company's website: Open a new browser tab and manually enter the company's website address to log in safely.
- Act immediately if you suspect unauthorized access: Change your email password and enable two-factor authentication (2FA) if possible.
- Watch for unusual activity in your account: Suspicious outbound emails, altered account details, or new filter rules could indicate a breach. If detected, take action immediately.
About mail.com
mail.com is one of the top free email portals in the United States. The company offers its consumer and business users an unparalleled selection of more than 100 brand-neutral email addresses related to a broad variety of topics such as business, geographic location and personal interests. mail.com also provides online office solutions and cloud applications. Options such as mobile apps, browser add-ons and mail collector make it easy for users to access and manage their email accounts. With state-of-the-art internet security and careful adherence to customer privacy requirements, mail.com strives for optimum performance.mail.com is a member of United Internet AG, Europe’s leading internet specialist.Be the first to rate this article!
Related articles