Black Friday, a time when consumers eagerly seek out irresistible deals, has unfortunately become a hunting ground for cybercriminals, experts told Arabian Business.
Exploiting the trust and excitement of shoppers, these malicious actors lure unsuspecting individuals with offers that are simply too good to pass up.
However, hidden behind these seemingly attractive deals lies a sinister intent – to steal consumers’ identities as well as their valuable data, thus leaving their wallets empty, Mortada Ayad, Director – Sales Engineering of software company Delinea said.
“Pressure is a key factor in the effectiveness of social engineering attacks such as scams. For example, we have seen many examples in the UAE of scammers pretending to be from government and law enforcement agencies with the hope of arm twisting their victims into acting quickly and skipping the due diligence they would have otherwise done if they were calm and composed. In a similar way, Black Friday is a time when cybercriminals have the opportunity to abuse consumer trust and offer timely deals,” he said.
During Black Friday sales, cybercriminals feed off the psychological tactics employed by scammers during such massive shopping events, according to Christian Borst, CTO EMEA at Vectra AI.
“The mechanisms behind these shopping events trigger some of the most basic feelings of the human being,” he said, adding that to the fear of missing out (FOMO) and the risk-taker mentality can often cloud a consumer’s judgment.
How can UAE shoppers protect themselves from cyberthreats during Black Friday?
Black Friday sales in the Middle East and North Africa (MENA) region are expected to reach $74 billion this year, according to a recent report by strategy consulting firm Redseer.
However, the report suggests that the significance of Black Friday in the annual retail calendar is diminishing due to evolving consumer habits.
Nevertheless, consumers must protect themselves from scams and fraudulent schemes, Borst said.
First, shoppers should be cautious about the platforms they use and verify the reputation of the sellers.
“Be mindful of platforms that allow 3rd parties to sell and always make sure you know who the final merchant is,” he said.
Additionally, Borst encouraged consumers to research prices in advance to determine if the deals are genuinely advantageous.
Finally, he stressed the importance of being in the right mindset for making purchases, advising shoppers to avoid adding the excitement of shopping to a stressful day that may impair decision-making.
What can businesses do?
Businesses, particularly retailers, also play a crucial role in protecting consumers from scams during the shopping season.
Ayad recommended that retailers focus on education and awareness by sharing tips on identifying and avoiding common scams through owned media channels such as email, social media, and storefront displays.
He also stressed the importance of providing clear and convenient customer service channels to help consumers verify the legitimacy of communications received from the brand.
Moreover, retailers must prioritise the security of their digital channels, handling sensitive customer information in line with regulations and enforcing robust access policies.
UAE shoppers must stay ‘vigilant’
According to Vibin Shaju, VP Solutions Engineering EMEA at Trellix, attackers use phishing techniques, often through fake websites and apps, to deceive consumers.
“Holiday shopping seasons and weekends are usually times when people let down their guard, and consequently when attackers put in more efforts and reap more benefits. This is applicable both for consumers and for enterprises in the cyberworld,” he said adding that fake websites and apps give a “sense of urgency,” mainly through phishing.
“With generative AI generally available for attackers, the phishing becomes more convincing and sophisticated, regardless of the geography,” he said.
He urged consumers to be cautious and cross-check the authenticity of websites before making purchases.
“Some general guidelines are to verify the legitimacy of websites and apps before making purchases, using strong, unique passwords for each online account and use multi-factor authentication (MFA) wherever possible.
“Be cautious of unsolicited emails or messages and avoid clicking on suspicious links, and keep your devices and software up to date with the latest security patches,” he warned, adding “monitor your financial statements regularly for any unauthorised transactions.”