The holiday season in December brings not only a surge in online shopping but also a record number of scams targeting e-commerce sites and their customers. From fake courier services to sophisticated attacks, companies must demonstrate their readiness in accordance with NIS2. Find out how to minimize risks during the busiest time of the year.
Advent should be a time of peace, lights, and slowing down. In the online world, however, December is traditionallythe peak season for cybercriminals. Companies are working at full speed, customers are shopping quickly and impulsively, and scammers know exactly how to exploit this dynamic.
On top of all this, there is increasing pressure to implement and comply with NIS2, which requires companies to demonstrate that they have security measures in place, accountability for processes, and the ability to prevent incidents. Advent is therefore a test for many businesses—technological, organizational, and legal.
E-shops experience a combination of high sales and a growing risk of attacks in December. Fraud is becoming increasingly sophisticated: fake payment gateways, cloned websites, and spoofed emails or SMS messages that can look just as trustworthy as the originals. Customers often have no idea that instead of receiving a payment confirmation, they have sent their data to attackers. And if an incident occurs, companies today must demonstrate that they had all required measures in place and documented—exactly as the NIS2 regime expects of them.
However, a new phenomenon is added to the traditional risks during the holiday season: phantom carriers. Cybercriminals have realized that delivery is the most vulnerable point in the entire e-commerce process. It is the moment when customers are least cautious and at the same time most willing to believe any information about the package.
Fraudulent shipping companies, however, look perfectly professional today. They have their own websites, functional tracking numbers, send SMS notifications, and in some cases even operate fake call centers. And then the package simply never arrives.
The impact is twofold: the customer loses money, the e-shop loses trust, and often the goods entrusted to the wrong carrier as well. This creates a combination of cybercrime, social engineering, and liability issues that companies must address just as thoroughly as payment or website security.
Advent is therefore turning into a real-world test of preparedness. A company must not only be able to handle the surge in purchases but also demonstrate that its processes are secure, its partners are trustworthy, and its response to incidents is swift. Digital security is no longer just an IT issue—it is a managerial and legal obligation that determines whether a business will get through December smoothly or spend the holidays dealing with damages and complaints.
We will focus on these very topics in our webinar.
If you want your Advent season to be peaceful and free from incidents or lost shipments, we’d love to have you join us.
The webinar “Transport Fraud and Cybersecurity: How to Effectively Protect Your Shipments from Risks and Losses” will take place on December 4, 2025.
We look forward to seeing you—and wish you a safe Advent season.
