One December, a Brantford shop owner received an email about a missed delivery. With holiday orders moving in and out at pace, it looked entirely routine, so she clicked the tracking link without a second thought. It led to a counterfeit page that captured her login. By the time she noticed, the scammers were already moving through her email.

Fraudsters favour the holidays for good reason. Everyone is busy, distracted, and expecting more deliveries and invoices than usual, and that combination is exactly what they exploit.

Why scams spike in December

The busier you are, the less you scrutinise. A surge of orders, year-end invoices, gift purchases, and shipping notices makes a single fraudulent message easy to slip through. Staff are racing to wrap up before the break, so they click faster and question less. Attackers understand this rhythm and time their efforts to arrive precisely when your guard is lowered.

Common holiday scams to watch for

A handful surface every year across the region. Fake delivery notices arrive by email or text, claiming a package is held up and asking you to click a link or pay a small fee; the link harvests your login or card details, and genuine couriers do not operate this way. Fraudulent invoices imitate a real supplier closely enough that the amount looks normal and someone pays, sending the money straight to a criminal. Boss email scams pose as the owner or manager and request an urgent payment or gift cards, with the urgency engineered so no one stops to verify. Fake charity appeals trade on a season of genuine giving, using a heartfelt message to divert a donation that never reaches anyone in need.

The common thread is urgency. Anything pressing you to act immediately deserves a second look.

How to keep your team safe

Slow down and verify. When a payment request arrives by email, confirm it with a phone call to a number you already hold, never the number printed in the message, and check invoices against real orders before paying.

Good security tools reinforce that discipline. We configure email filtering that intercepts many fakes before they reach your inbox, along with login protection that limits the damage if a password is exposed. Our managed IT services include this kind of everyday protection, so you are not facing the season alone.

A brief reminder to your team before the holidays goes a long way. If you have questions about what is safe, our FAQ page covers many of the common ones, and to see where your defences currently stand, try our free IT assessment.

FAQ

How can I tell if a delivery notice is fake?

Check the sender’s email address and avoid the link entirely. Go directly to the courier’s official site and enter your tracking number there. Genuine couriers rarely request payment by text or email.

What is a boss email scam?

It occurs when a fraudster impersonates your manager or owner and asks a staff member for a fast payment or gift cards. Always confirm money requests by phone before acting.

Why are scams worse during the holidays?

People are busier and expecting more messages about orders and deliveries. That rush makes it easier for a fraudulent message to blend in and earn a click.

Should I train seasonal staff on this too?

Yes. Temporary holiday workers are often less familiar with your systems and suppliers, so a short briefing on common scams protects everyone.

Would you like a quick scam-safety review before the busy season? Contact us and we will help your team stay sharp.