MetroMandi logo MetroMandi

Festive Season Scams India: 7 Ways to Avoid Online Shopping Fraud

Deepfakes, fake coupons, and phishing are surging this festive season. Learn how to spot fraudulent deals, protect your UPI, and shop safely online with our ex…

How to Spot and Avoid Festive Season Scams: A Shopper's Safety Guide, illustrative featured image
The Deepavali sale notification pinged at 11:47 PM. The price for that 55-inch QLED you’ve been eyeing since August was suddenly 60% off. The link looked right. The logo looked right. The urgency felt real. You clicked, entered your OTP, and watched your bank balance drain faster than a firework display in a thunderstorm. That’s not paranoia. That’s Tuesday in the Indian e-commerce ecosystem. A recent industry survey found that one in three Indian shoppers has been duped during festive sales, with AI-generated deepfakes and hyper-personalized phishing scams driving the surge. The days of the "Nigerian prince" email are over. The new fraudster doesn't need to trick you into sending money to a stranger. They just need to impersonate a brand you trust, a celebrity you like, or a friend who "accidentally" shared a coupon code. Here’s how to keep your hard-earned Diwali bonus, Christmas savings, and New Year budget out of their pockets. ## The Anatomy of a Modern Festive Scam Let’s break down what you’re actually up against. It’s not just about fake websites anymore-though those still exist in droves. The current threat landscape is a three-headed monster. ### 1. The Deepfake Endorsement Trap You’ve seen the clips. A grainy video of Mukesh Ambani or a popular Bollywood star shilling a "government-backed investment scheme" or a "limited-time gold giveaway." The lip-sync is off by a fraction of a second, but the voice is uncanny. Scammers are using AI voice cloning and face-swapping software to manufacture celebrity endorsements for fraudulent shopping portals. They push these via WhatsApp forwards and Instagram reels, claiming the portal offers "festive-season exclusive" discounts that no legitimate retailer could match. This is a growing concern as [AI agents rise to replace traditional SaaS stacks](/tech/blog/the-rise-of-ai-agents-will-they-replace-your-saas-stack), making it harder to distinguish between automated and human interactions. **The red flag:** If a celebrity is telling you to "hurry" and "download the app directly from this link," it’s a deepfake. Real endorsements don't work that way. ### 2. The "Phantom Courier" and OTP Harvesting This one is brutally effective. You’ve ordered a gift for a relative. You get a call from "BlueDart" or "Delhivery" saying your package is stuck due to an "address mismatch." They ask for the OTP sent to your phone to "verify" the new address. That OTP isn't for the courier. It’s for the UPI transaction they’re initiating on their end. By the time you realize the delivery guy was a scammer, your money is gone. ### 3. The Clone Website This is the classic, but it’s getting slicker. Scammers scrape the HTML and CSS of a legitimate site like Myntra or [Flipkart](https://www.flipkart.com/), copy the product images, and host it on a domain that looks almost identical-think `myntra-offers.store` or `flipkart-clearance.shop`. They buy Google Ads to appear at the top of search results for "best Diwali deals." You pay via UPI or card, and the product never arrives. The site vanishes within 48 hours. ## How to Verify Before You Buy The golden rule of festive shopping is simple: **Slow down.** The entire scam ecosystem relies on urgency. Here’s a pre-purchase checklist that takes less than 60 seconds. - **Check the domain age:** Use a free tool like WHOIS lookup. If the domain was registered in the last three months, walk away. - **Look for the "https" and the padlock:** This is basic, but check *where* the padlock leads. Click it. If the certificate is issued to "CloudFlare" or a random LLC instead of the brand name, it’s a red flag. - **Cross-reference the price:** If a site is selling a ₹15,000 product for ₹4,000, and the official site isn't matching that price, it's a bait. Legitimate sales have legitimate price drops, but they rarely hit 70% off on current-generation electronics. - **Google the exact URL:** Type the URL into Google. If other shoppers have reported it as a scam, you'll likely see complaints on Reddit, Twitter, or consumer forums. ## Our Take: The Tools and Habits That Actually Work We test a lot of deals at MetroMandi. We also get a lot of phishing emails pretending to be from us. Here’s what we actually do to stay safe, and what we recommend. **Use a virtual credit card.** This is our top pick for festive season. Banks like HDFC and SBI offer temporary virtual card numbers with a set spending limit. If the number gets compromised, the scammer can only drain the limit you set for that specific transaction. It’s a game-changer for shopping on lesser-known sites. **Turn on "UPI AutoPay" controls.** Most UPI apps let you set a daily transaction limit. If you're doing heavy shopping, set a cap that you're comfortable with. It won't stop a scam if you authorize it, but it limits the blast radius if your device gets compromised. **Stick to the "Big Three" for high-ticket items.** For electronics, appliances, and expensive fashion, we recommend [Amazon](https://www.amazon.com/), Flipkart, and the brand's own official site (like Samsung.com or Nike.in). Yes, you might find a better price on a random site, but the 5% savings isn't worth the 100% loss risk. **Use a secondary email for shopping.** Create a separate email address for all your e-commerce registrations. If that email starts getting bombarded with phishing attempts, you know which database leaked your info. ## Reading the Fine Print of the "Discount" Let’s talk about bank offers and cashback. Scammers love to hijack these. ### The Fake "Cashback" Confirmation You complete a purchase. A pop-up appears: "Congratulations! You won ₹500 cashback. Enter your UPI ID to claim." This is a classic phishing vector. Legitimate cashback is usually auto-credited to your wallet or bank account. You never need to "enter your UPI ID" to receive money-you only need it to send money. If you see this pop-up, close the tab immediately. Do not provide your UPI PIN, your CVV, or your net-banking password. No legitimate entity will ever ask for these after a transaction. ### The "Customer Care" Cold Call If you receive a call from someone claiming to be "Amazon Customer Support" offering a refund for a "failed delivery," hang up. Amazon, Flipkart, and most major retailers do not make unsolicited outbound calls to process refunds. They handle disputes through their in-app chat and email channels. If you have an issue, you call them. Never the other way around. ## The Deepfake Defense: A Specific Playbook Because AI fraud is the fastest-growing segment, we need a specific playbook for it. **Do a visual sanity check.** Look at the hands. AI-generated videos often botch the fingers. Look at the lighting. If the face is bright but the background shadows don't match, it's fake. **Search for the video on YouTube.** If a celebrity is truly endorsing a product, there will be a press release and a news article. If you can't find a mainstream media mention of the endorsement, it's likely a clone. **Never trust a "private" deal.** Scammers are now using AI to generate fake chat logs. They'll send you a screenshot of a "conversation" with a brand representative offering a special price if you pay via a specific link. Brands do not negotiate prices via private WhatsApp chats. ## The 24-Hour Rule Here is the single most effective tactic we know: **Wait 24 hours before making any purchase over ₹2,000.** Festive sales are engineered to create FOMO (Fear Of Missing Out). The "Lightning Deal" countdown timer is a psychological trigger. But here’s the secret: most of those deals come back. The price might fluctuate by 1-2%, but the risk of getting scammed drops by 90% when you step away from the screen and revisit the link the next day. If the deal is still live and the site still looks legit after a night's sleep, go for it. If the link is dead or the price has "magically" changed, you just dodged a bullet. ## FAQ **Q: How do I spot a deepfake video of a celebrity endorsing a shopping site?** Look for unnatural blinking, blurry edges around the face, and mismatched audio. Cross-reference the claim on the celebrity's official verified social media handles. If it's not there, it's fake. **Q: What should I do immediately if I realize I've been scammed?** Call your bank's customer care immediately to block your card or UPI PIN. Then, file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) or call 1930. Time is critical-the faster you report it, the higher the chance of freezing the fraudulent transaction. **Q: Is it safer to pay by credit card or UPI for online shopping?** Credit cards generally offer better fraud liability protection. Most major Indian banks offer "zero liability" policies for unauthorized transactions. UPI is convenient, but if the scammer tricks you into approving a payment, reversing it is harder. For high-value purchases, use a credit card.

Frequently asked questions

Q: How do I spot a deepfake video of a celebrity endorsing a shopping site?

Look for unnatural blinking, blurry edges around the face, and mismatched audio. Cross-reference the claim on the celebrity's official verified social media handles. If it's not there, it's fake.

Q: What should I do immediately if I realize I've been scammed?

Call your bank's customer care immediately to block your card or UPI PIN. Then, file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) or call 1930. Time is critical-the faster you report it, the higher the chance of freezing the fraudulent transaction.

Q: Is it safer to pay by credit card or UPI for online shopping?

Credit cards generally offer better fraud liability protection. Most major Indian banks offer "zero liability" policies for unauthorized transactions. UPI is convenient, but if the scammer tricks you into approving a payment, reversing it is harder. For high-value purchases, use a credit card.

Related articles