During sales periods, Black Friday or Christmas, the risk of cybercrime is high. Consumers are often in more of a hurry than usual, wanting to get the latest toy or fashionable item, or fearing they might miss out on an interesting offer... Knowing that these factors can encourage them to rush and be less vigilant, cyber crooks take advantage of this to launch new traps.
That's why we are inviting Internet users to be extra vigilant to ensure secure transactions, and why we are issuing a few recommendations in this respect.
Secure merchant site
Always be careful when entering your bank details and check in particular that the merchant site you are visiting is secure. To do this, check its address in the navigation bar: it should always begin with https://, the "s" indicating that communication with the site is secure, and therefore that the information passing through cannot be pirated. A small padlock often precedes the address, confirming that you can browse in complete security.
Site reputation
Before ordering, check that the site is actually linked to a company. In particular, check that the following are listed, often at the bottom of the page
- the "general terms and conditions of sale" (GTCS) or the terms and conditions of service (subscription, etc.): these set out the terms and conditions of sale, delivery, guarantee and product returns;
- legal notices": these tell you who is behind the website, so you know where the company is located. For example, it is compulsory for the website to indicate "the identity of the professional, for example its company name, the geographical address of its establishment and its telephone number" (Art. 113-1 of the Luxembourg Consumer Code).
You can also check your e-reputation by entering the name of the site or product on a search engine, possibly combined with the term "scam", or by using tools to check the seriousness of sites, such as www.scamadviser.com.
You can also check buyers' opinions, but beware of opinions that are too good to be true! Since December 2022, with the entry into force of the so-called "Omnibus" law, traders have been obliged to inform consumers whether or not their opinions come from verified consumers (Art. 122-3 of the Luxembourg Consumer Code).
Dropshipping
This method consists of selling online without stock, which can lead to extended delivery times. Before signing or validating their "basket", the seller is obliged to provide clear information on delivery to the consumer (how, when, how much). Unless otherwise stated, the maximum delivery time is 30 days.
The products ordered will be sent directly by the manufacturer to the consumer, but delivery times are often longer, which can be problematic, particularly at Christmas time.
Note that if the trader fails to deliver the goods, the consumer has the right to terminate the contract immediately and be reimbursed. The burden of proof regarding the request for delivery lies with the trader. (Art. L.213-7 of the Luxembourg Consumer Code)
Bank details
Use your private WIFI
Use your private WIFI network to make your purchases and communicate your bank details. If you connect to a public WI-FI network, from a café or an airport for example, you will not know which network you are connecting to. Access to a network may have been created by a fraudster who can then access the data stream. If you hand over your passwords or bank details, they will be passed on to the crooks.
Second-hand websites
If you buy from second-hand sites or sites selling between private individuals, be careful about payment methods. Give preference to hand-delivery against payment in cash, or use the secure payment systems offered by the sales platforms. And make sure you stay on these platforms. If the purported seller offers to let you out, do not proceed with the transaction.
It is also important to point out that a private sale does not fall under the Consumer Code. As a result, buyers are not entitled to pre-contractual information or a legal guarantee of conformity.
Phishing
Beware of fake sites that imitate official retailer sites. It is preferable to connect directly by typing the name of the desired site in the search bar. Some fraudsters duplicate retailers' websites "identically". Also beware of e-mails with links, which can be a source of phishing.
Parcel scams
The parcel scam consists of sending an SMS message to deliver a parcel. You think the text message is intended for you because you have placed an order, but in reality it is a random text message sent by scammers with the aim of getting you to send your bank account login details.