The stockings are hung, the silver bells are ringing, and the holiday season is in full swing. Of course, we love unexpected gifts, but there are some holiday surprises that nobody wants (and no, we’re not talking about those seven swans a-swimming). We’re talking about holiday scams. So, here is a festive wrap-up of some seasonal scams to watch out for. (And, by the way, if you get any truly unexpected gifts—whether it’s four calling birds or some golden rings—watch out for brushing scams.)
On the first day of Christmas, a scammer sent to me… a failed delivery notice.
Failed delivery notice scams typically start with an unexpected email or text (or even a paper notice) claiming a package couldn’t be delivered. These messages often include a link or phone number to “reschedule” the delivery—but don’t be fooled. If you call the phone number, you’ll be connected with a scammer who demands your personal or payment details. The links in these messages typically lead to fake websites—or even worse, install harmful software on your device. Especially during the holidays, be extra cautious of shipping notifications. If you get one, double-check with the delivery company directly (using their official website or app) and never click on unexpected links. Never share your sensitive information online or over the phone without verifying who you are dealing with.
On the second day of Christmas, a scammer sent to me… two bogus websites.
During the holidays, scammers create fake online stores that look like real retailers to trick shoppers. These bogus websites often advertise incredible deals on popular items to entice you into letting down your guard. Once you pay, the item either never arrives or you receive a cheap, knockoff version. Some of these sites also steal your credit card details or personal information. To avoid these scams, look for red flags like poorly written content, missing contact information, or a lack of secure payment options. Always shop on trusted websites and verify URLs to ensure you’re on the retailer’s official page.
Related: How to Stay Safe While Shopping Online
On the third day of Christmas, a scammer sent to me…a Facebook Gift Exchange.
Social media gift exchanges promise you’ll receive multiple gifts in return for sending just one. The scam goes by many names including Secret Sister, Secret Santa, Secret Santa Dog, Wine Exchange, or Book Exchange. These schemes claim to be a fun, inexpensive way to spread holiday cheer but are often pyramid schemes cloaked in holly-jolly packaging. They are also illegal. Participants are asked to provide personal information, like addresses or email accounts, which can lead to identity theft or unwanted contact from scammers. At the very least, participants spend time and money sending a gift to a stranger and receive nothing in return.
On the fourth day of Christmas, a scammer sent to me…free Starbucks cards.
Free gift card scams often pop up around the holidays, targeting people with offers of “free” Starbucks, Amazon, or other popular gift cards. These scams often appear as social media ads, email offers, or text messages claiming you just need to fill out a survey or click a link to claim your card. In reality, the link leads to a scammy website designed to steal your personal information or install malware on your device. So, as much as you might crave that free Caramel Brulée Latte, be wary of unsolicited offers. Remember that legitimate companies don’t give away gift cards for free without clear terms. Before you click, verify the promotion directly with the company through their official website or app.
On the fifth day of Christmas, a scammer sent to me…the love of my life.
Holiday romance scams exploit the loneliness some people feel during the festive season. Scammers create fake profiles on dating apps or social media, pretending to be someone looking for love. They quickly build emotional connections and then invent emergencies, like needing money for a family crisis or travel expenses to visit. Victims often send money, only to discover the person was never real. To protect yourself, be cautious of anyone who avoids in-person meetings, asks for financial help, or creates elaborate excuses. Always take your time getting to know someone and be skeptical of sudden, intense relationships.
On the sixth day of Christmas, a scammer sent to me…an awesome new job.
Job scams ramp up during the holidays, especially with the demand for seasonal workers. Scammers post fake job ads on social media (or even legitimate hiring platforms like LinkedIn), offering high pay for minimal work or at-home positions. They often ask for sensitive information like your Social Security number or require upfront payments for training or equipment. Once you comply, they disappear with your money or steal your identity. To stay safe, research the company, avoid jobs that seem too good to be true, and never pay for a job opportunity. Legitimate employers won’t ask for money upfront. They also won’t demand personal information until they’ve officially hired you.
Related: Common Job Scams and How to Avoid Them
On the seventh day of Christmas, a scammer sent to me…a request for a donation.
Charity scams take advantage of holiday generosity by impersonating legitimate organizations or inventing fake causes. Scammers may call, email, or approach you in person, using high-pressure tactics and emotional stories to urge you to donate. Often, the money goes to their pockets instead of those in need. To avoid falling victim, research charities before donating, use trusted platforms, and be cautious of unsolicited donation requests. Look for clear details about the charity’s mission and how funds are used. If you’re unsure, verify the charity through sites like Charity Navigator or the Better Business Bureau.
On the eighth day of Christmas, a scammer sent to me…A phone call from my bank.
Bank impersonation scams target individuals by pretending to be their financial institution. Scammers may call, text, or email, claiming there’s an issue with your account or a suspicious transaction that needs immediate attention. They often ask for sensitive information like your account number, PIN, or online banking credentials, which they use to steal money or commit fraud. To protect yourself, remember that legitimate banks or credit unions won’t ask for personal information through unsecured channels. Maps employees (or our Fraud Department) will NEVER contact you to ask for security codes that are texted to you. We will also never call or text you and ask for your user ID, passwords, PINs, or Social Security Number. If you receive a suspicious message, contact us directly using the official number on our website or your member statement.
On the ninth day of Christmas, a scammer sent to me…an ATM card skimmer.
ATM and point-of-sale (POS) card skimmers are devices that criminals secretly attach to machines to steal your card information. During the busy holiday season, these devices are more common in high-traffic areas like shopping malls and gas stations. Skimmers can also pair with small cameras to capture your PIN. To stay safe, inspect card readers (even familiar ones) for anything unusual before using them, cover the keypad when entering your PIN, and consider using contactless payment methods when possible. Monitoring your bank statements regularly can help catch fraudulent charges quickly.
On the tenth day of Christmas, a scammer sent to me…fake letters from Santa
Fake letters from Santa scams target parents and grandparents by offering personalized letters for children at a low cost. Scammers advertise these services through emails or social media, directing buyers to websites where they steal credit card details or personal information. Some even use the child’s details for identity theft. So, always be cautious of unsolicited offers for personalized communications—especially during the holidays. To avoid these scams, create your own Santa Letters at home using a free template from trusted websites that won’t demand personal information (like Canva or The Spruce). If you are quick about it, you can even get USPS to postmark the letter from the North Pole.
On the eleventh day of Christmas, a scammer sent to me…hacked charging stations.
During the holiday travel season, public charging stations at airports, malls, or rest stops may seem like a godsend, but they are often targets for hackers. These bad actors tamper with USB ports to install malware or steal data from connected devices—a tactic known as “juice jacking.” When travelers plug in their phones or tablets, their personal information, including passwords or financial details, could be compromised. To protect yourself, avoid using public charging stations and carry your own charging cable and adapter to use a regular power outlet. Alternatively, consider portable power banks to ensure your devices stay charged safely on the go.
On the twelfth day of Christmas, a scammer sent to me…puppies and kittens.
Holiday puppy and kitten scams are some of the grinchiest scams around during the festive season. Scammers, preying on shoppers hoping to adopt adorable pets, post fake ads with irresistible photos of animals for sale, often at unusually low prices. They frequently ask for upfront payment (for vet costs, shipping, or special handling), but once the money is paid, the pet never arrives. To avoid this heart-wrenching scam, only buy pets from reputable breeders. Even better, adopt from local shelters like Salem Friends of Felines, Silverton Cat Rescue, Oregon Dog Rescue, or Oregon Humane Society. Always meet the animal in person before making a payment and be wary of sellers who refuse in-person interactions or pressure you to pay quickly.
How to Stay Safe This Season
Above all, stay informed because as technology changes, thieves get trickier. So, it’s important to continuously educate yourself on the threats that are circulating. If you haven’t already, check out our Security Library for articles, quizzes, and security tips. And in the meantime, to keep your assets and information safe, follow these tips:
- Don’t engage with unknown/unexpected phone calls, texts, or social media messages.
- Never click unknown links—especially when they come from emails or phone numbers you do not recognize.
- If a deal seems too good to be true, it’s probably a scam.
- If someone is pushing you to buy, it’s probably a scam.
- Don’t send money to people you have only met online.
- Never share your password or PIN with others.
- Monitor your Maps account closely. Log in to online banking regularly and review your monthly statements. Contact us if anything looks suspicious.
- Change your Maps account password often and use complex passwords.
- Set up alerts on your account for balance changes or big transactions.
- Contact us immediately if you believe your identity has been compromised.
Want more security tips?
- Check out our tips for staying safe while shopping online.
- Educate yourself on the Most Common Scams in Oregon.