How to avoid the latest generation of scams this holiday season

By Shaila Rana, Purdue University and Nelly Mulleneaux, Purdue University Imagine this: Two days before your family holiday party, you get a text about an online order you placed a week ago, saying the package is at your door. It comes with a photo – of someone else’s door. When you click the attached link, it takes you to the online store, where you enter your username and password. Somehow that doesn’t work, even though you answered your security questions. Frustrated, you call customer service. They tell you not to worry since your package is still on the way. You receive your package a day later and forget all about the earlier hassle. In the end, it was just a mistake. You are unaware of the terrifying thing happening in the background. You’ve fallen for a classic package-delivery scam, and a form of “smishing,” or SMS phishing. And you’re not alone. One in three Americans have fallen victim to cybercrime, according to a 2023 poll. That’s up from 1 in 4 in 2018. As cybersecurity researchers, we want to spread the word to help people protect themselves. Old-fashioned threats haven’t disappeared – identity thieves still steal wallets, dumpster dive for...