MetroMandi logo MetroMandi

Festive Scam Prevention: Safe Online Shopping Tips for India

One in three Indians face festive shopping scams. Learn to spot fake deals, dodge deepfake fraud, and use safe online shopping tips to protect your money this…

How to Avoid Festive Season Scams: A Shopper's Safety Guide — illustrative featured image
The first time Meera’s mother called her about a “[flipkart](https://www.flipkart.com/) freedom sale” link on WhatsApp, it felt harmless. A quick tap, a login page that looked pixel-perfect, and a “confirm your address” prompt. By the time Meera realized her mother had handed over the OTP, the fraudsters had already ordered two iPhones on her mother’s credit card. That was Diwali last year. This year, the stakes are higher. A recent survey suggests that roughly one in three Indian shoppers have fallen victim to festive season fraud, with AI-generated voice clones and deepfake videos now powering a new wave of deception. The scams aren’t just about fake jewelry sites anymore. They are sophisticated, personalized, and timed perfectly to exploit your shopping urgency. You do not need to be a cybersecurity expert to fight back. You just need to slow down. Here is how to spot the traps before they snap shut. ## The Anatomy of a Festive Scam Scammers run on psychology, not technology. They know that during the festive season, your decision-making window shrinks. Flash sales end at midnight. Limited stock warnings pop up. The fear of missing out overrides your common sense. Most festive shopping scams in India follow one of three patterns: 1. **The Too-Good-To-Be-True Offer:** A brand-new smartphone at 80 percent off, but only if you pay via UPI to a “personal account” to avoid taxes. 2. **The Urgent Logistics Call:** A caller claiming to be from Delhivery or Blue Dart says your package is stuck due to “incorrect pin code.” They need a “verification fee” of Rs. 10 to release it. They also need your OTP. 3. **The Clone Website:** A domain like `amazn-deals.in` or `flipkart-offers.shop` that mirrors the real site’s layout but steals your card details the second you hit “checkout.” The AI twist makes these harder to spot. Scammers now scrape your social media voice notes to clone your voice and call your parents, begging for money to “clear a customs hold” on a gift. The voice sounds exactly like you. It is not. As [AI starts scheming](/tech/blog/when-ai-starts-scheming-understanding-the-risks-and-how-to-protect-yourself), the deception becomes even more layered. ## Red Flags That Scream “Fake” You do not need to inspect every URL with a magnifying glass. You just need to look for the inconsistencies that legitimate retailers never have. ### Payment Method Anomalies Real e-commerce platforms do not ask for direct bank transfers. If a seller on a marketplace insists on moving the conversation to WhatsApp and then requests payment via GPay or PhonePe to a personal number, that is a hard stop. This is the single most common trigger for online fraud prevention failures. ### The “Customer Care” Number on Google Here is a nasty one. You search for “[Amazon](https://www.amazon.com/) customer care number,” and the top result is a paid ad. You call it. The “executive” asks you to install a screen-sharing app like AnyDesk to “verify your refund.” Within minutes, they can see your bank app open. They drain your account. Never call a customer service number from a Google ad. Always use the number listed inside the official app or on the actual receipt. ### Pressure Tactics and Countdown Timers Legitimate flash sales do exist. But a countdown timer that resets every time you refresh the page is a fake urgency mechanism. If a site tells you “Only 2 items left” for three consecutive hours, it is a lie. ## The Deepfake Danger: When Your Own Voice Betrays You We need to talk about the AI elephant in the room. Deepfake technology has dropped in cost and complexity. For a few hundred rupees, a scammer can use off-the-shelf software to clone a voice from a 30-second Instagram story. Here is how it plays out during the festive season: You post a video of yourself unboxing an early gift. A scammer clones your voice. They call your father, spoofing your number. They say they are in police custody after a minor car accident and need Rs. 50,000 for bail. The panic in the voice is convincing because it is your voice. The defense is simple: **Set a family password.** Agree with your immediate family that any urgent financial request over a call requires a verbal password phrase. If the caller cannot provide it, hang up and call the person back on their known number. This one habit neutralizes most AI voice scams. ## Safe Online Shopping Tips That Actually Work Let us get practical. Here are the habits we use at MetroMandi when hunting for festive deals, and they have kept us clean for years. For more guidance on [spotting fake deals](/coupon/blog/how-to-spot-fake-deals-a-shopper-s-guide-to-avoiding-online-fraud), these principles extend beyond just the holiday rush. ### Use a Virtual Card or a Dedicated Card Do not use your primary debit card for online shopping. Most Indian banks now offer single-use virtual cards or temporary card numbers. If the site turns out to be fraudulent, the card is useless to the thief. Alternatively, keep a separate credit card with a low limit specifically for e-commerce purchases. That way, even if the details are stolen, the damage is capped. ### Check the Domain Age, Not Just the Lock Icon A padlock icon only means the connection is encrypted. It does not mean the seller is honest. Before entering payment details on an unfamiliar site, run a quick WHOIS lookup or use a tool like `whois.domaintools.com`. If the domain was created three weeks ago and promises luxury sarees at 90 percent off, walk away. ### The “Pay on Delivery” Preference For high-value items from lesser-known sellers, always choose Cash on Delivery if available. It costs a little extra sometimes, but it eliminates the risk of paying for a product that never arrives. If a seller refuses COD on a first transaction, that is a red flag. ### Enable Two-Factor Authentication Everywhere This sounds basic, but it is the difference between a scammer getting into your email and being locked out. Use an authenticator app (like Google Authenticator) rather than SMS-based OTPs. SIM swap fraud is rising in India, where scammers block your SIM and receive your OTPs on their device. Staying ahead of these threats requires the same adaptive mindset as [navigating search volatility](/dgtg/blog/navigating-search-volatility-how-smbs-can-stay-calm-and-adapt), vigilance and constant adjustment. ## Our Take: The Tools and Sites We Trust We are not here to scare you away from shopping. We are here to make sure you keep your money while getting the deals. After testing dozens of platforms and security tools, here is our honest recommendation for the festive season. **For browser safety:** Install `uBlock Origin` and `Privacy Badger`. They block most malicious pop-ups and tracking scripts that lead to phishing pages. They are free, open-source, and do not sell your data. **For deal hunting:** Stick to established coupon aggregators like MetroMandi (yes, we are biased, but we manually verify codes before publishing). For direct purchases, use the official apps of Amazon, Flipkart, Myntra, or Ajio. The apps have better security protocols than mobile browsers. If you are comparing platforms, our [Flipkart vs Amazon festive sales analysis](/coupon/blog/flipkart-vs-amazon-festive-sales-which-offers-better-discounts-this-year) can help you decide where to shop safely. **For payments:** Use `Razorpay` or `Cashfree` checkouts when buying from indie brands. These gateways offer buyer protection. If a site uses a random payment gateway you have never heard of, do not proceed. **For identity protection:** If you are a heavy online shopper, consider a paid plan from a service like `NordVPN` (for public Wi-Fi) and a password manager like `Bitwarden` to generate unique passwords for every site. Reusing passwords is how one hacked account turns into five. Our firm stance: If a deal requires you to install an APK file or a third-party app to “unlock” the discount, it is a scam. No exceptions. Legitimate brands do not hide discounts behind sideloaded software. ## The Post-Purchase Trap: Refund Scams You have successfully bought a gift. Two days later, you get a call from “Amazon Pay” saying your order was flagged for fraud and you are due a refund. They ask for your bank details to process the reversal. This is the second wave of festive shopping scams India faces. The scammer already knows your order details (often bought from data leaks). They use this knowledge to sound official. Remember: **You never need to share your CVV, PIN, or OTP to receive a refund.** Refunds go back to the original payment method automatically. If someone asks for a “processing fee” to release a refund, they are stealing from you. ## FAQ **Q: How do I know if a festive discount is too good to be true?** A: Cross-check the price on the brand’s official website. If the discount exceeds 50 percent on a newly launched electronic item, it is likely counterfeit or a phishing lure. Also, check the seller’s rating and the number of reviews. A seller with 3 reviews and a 100 percent positive rating is usually fake. **Q: What should I do immediately if I think I have shared my OTP with a scammer?** A: Call your bank’s 24/7 helpline immediately and freeze your card. Do not wait for the transaction to appear. Then, change the password on your email and enable two-factor authentication. Finally, file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) with a timeline of events. **Q: Are QR code payments safe for online shopping?** A: No. QR codes are meant for in-person payments where you can see the merchant’s name on your screen. For online purchases, if a seller sends you a QR code and asks you to scan it to “receive a refund” or “verify the order,” they are trying to initiate a payment from your account. Never scan a QR code sent via chat or email.

Frequently asked questions

Q: How do I know if a festive discount is too good to be true?

A: Cross-check the price on the brand’s official website. If the discount exceeds 50 percent on a newly launched electronic item, it is likely counterfeit or a phishing lure. Also, check the seller’s rating and the number of reviews. A seller with 3 reviews and a 100 percent positive rating is usually fake.

Q: What should I do immediately if I think I have shared my OTP with a scammer?

A: Call your bank’s 24/7 helpline immediately and freeze your card. Do not wait for the transaction to appear. Then, change the password on your email and enable two-factor authentication. Finally, file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) with a timeline of events.

Q: Are QR code payments safe for online shopping?

A: No. QR codes are meant for in-person payments where you can see the merchant’s name on your screen. For online purchases, if a seller sends you a QR code and asks you to scan it to “receive a refund” or “verify the order,” they are trying to initiate a payment from your account. Never scan a QR code sent via chat or email.

Related articles