Keeping crooks away as you holiday shop online

Are you planning to skip the crowds at the mall this holiday season and do your holiday shopping from home? One important thing to remember is that the comfort of buying from home also has risks, such as fraud, and "phishing" and identity theft.

Beware of look-alike phishing sites

This is the season when more people fall for the fake email from Amazon, or eBay, etc. Some email will say, 'Your account is expiring" or "Your package can't be shipped" -- something to make you panic and act without thinking. You click on the link, and it looks like Amazon. But it's not. It's a lookalike where thieves hope you'll put in your credit card information. Never click on a link like this -- you won't get these types of emails from a reputable company. Always check the URL bar to see if it's a real site. A string of random numbers or strange words in front of the main URL is a bad sign. You should just type it in yourself instead of clicking on a link. And look for that green lock that shows it is a legit, secure website.

Know how to spot fraudulent sellers on auction sites

You need to know how to spot a fraud on one of these sites, like eBay, where an individual is a seller. If they start telling you they are out of the country and need to accept money through a money wire service like Western Union, that's a red flag. If they say they just email me your credit card number and I'll process it -- that's a red flag. Check their ratings -- and see if the positive ratings are spread out over time, or if there's 10 made in the same hour. And READ the description carefully. I've seen scams that say iPhone, Original Box. People are bidding. The fine print below, really tiny, says no phone included! Talk to the seller if you're unsure. Putting the lowest bid gets you access to see the seller's contact info. If you can't get in touch with the seller directly, if they don't pick up their phone, that's a red flag, and you can cancel your bid.

Don't allow sites to remember info

Don't check that box that says to remember your info. If your log-in account or computer is compromised, the bad guys now have your credit card info, too! How convenient for them. Just take the time to enter in your credit card info each time.

Don't share personal data with a chat assistant

When you're on a shopping website and the chat window pops up to talk live with a customer service assistant, don't go blabbing your credit card info and other personal data. These are outsourced assistants for the most part. You don't know who is on the other side, so be careful. You wouldn't walk into a store and hand the clerk your credit card number and login password on a piece of paper.

Don't shop on public Wi-Fi that isn't password protected

When you go on a free Wi-Fi that isn't password-protected, anyone else on that Wi-Fi who is tech savvy enough can tap into your computer. So be careful what shopping you do on that coffee shop Wi-Fi. Also, if you go to an Internet cafe or public computer, the next user might be able to see your shopping history. It's rare for it to happen, but it's possible.

Only pay with credit cards, not debit cards

If someone gets your information, you don't have to pay until the problem is fixed. With debit cards, the money is sucked right out of your checking, and you're left with an empty bank account while you wait for it to be fixed. If you're doing online shopping, pay close attention to your accounts -- you need to report fraud right away.

This post was originally published on Dec. 12, 2011.