Consumers

Black Friday: all the advice from the Data Protection Authority on how to shop safely

The Authority’s newsletter warns of potential fraudsters who steal personal data, obtain payments or trick people into installing viruses or other malicious software on their devices, particularly during the peak online shopping season

Logo di Amazon in questa illustrazione scattata il 6 novembre 2026. REUTERS/Dado Ruvic/Illustrazione REUTERS

3' min read

Translated by AI
Versione italiana

3' min read

Translated by AI
Versione italiana

Be wary of offers that seem too good to be true, exercise caution when making online payments, and be vigilant about notifications regarding updates to an order’s delivery status. These are some of the recommendations contained in the 12 November newsletter from the Data Protection Authority, which has drawn up a list of tips ahead of Black Friday.

Extraordinary discounts – especially if accompanied by a request to click on a link or provide personal or banking details – and adverts on social media, as well as websites offering products at rock-bottom prices, should be assessed carefully before making a purchase. The risk, explains the Data Protection Authority, is that – via email, text messages or other messages – potential fraudsters may steal personal data, obtain payments or trick you into installing viruses or other malicious software on your device. Fake websites, created specifically during the peak online shopping period, are also dangerous.

Loading...

URLs under the microscope

To verify the authenticity and reliability of the seller, the Data Protection Authority recommends checking that the URL in the address bar matches the company’s name. It is also useful, when receiving offers via email, text message or social media, to visit the website directly by typing in the address: it is, in fact, best to avoid clicking on any links you receive. It is also essential to gather information and read reviews about the seller using search engines or AI tools. You can also check that the website uses an encrypted connection, but you should always pay attention to security warnings from your browser. In the event of a warning from the search engine, the Authority recommends stopping browsing and not entering any personal or banking details. Finally, the Data Protection Authority suggests that it may be useful to search online for the company’s contact details and verify the information directly by telephone, email or via a dedicated chat service.

Prepaid cards are better

Once you have decided to go ahead with the purchase, the Authority adds, it is best to pay using prepaid credit cards or other methods that allow you to avoid sharing your bank details. It is also useful to set up notification systems that alert you in real time to transactions, so that you can identify any unauthorised charges and take prompt action with your bank or card issuer.

Exercise the utmost caution whilst waiting to receive your parcel containing the products you have ordered: as the Data Protection Authority explains, during the Black Friday period there is an increased risk of fake notifications regarding dispatch, order status updates, delivery issues or even parcel collection. Such communications can be misleading even if the user has actually made a purchase: it is always advisable not to provide personal details and to avoid clicking on links or installing software. If you wish to check the progress of your delivery, it is best to use the official website or app of the retailer or courier, without clicking on any links contained in the message.

Security backups

Please also take care when disposing of old electronic devices, as they may contain personal data. After backing up any content you wish to keep, the Data Protection Authority recommends deleting any information still stored on the device by formatting it and restoring it to its factory settings. To reduce the risk of cyber-attacks and address vulnerabilities, the Authority adds that it is advisable to install security updates promptly. To protect email, social media and other service accounts, it is good practice to enable two-factor authentication, which introduces a second form of identity verification in addition to the password. As the Authority emphasises, however, it is important to remember that the first line of defence is to use digital services consciously and responsibly.

Copyright reserved ©
Loading...

Brand connect

Loading...

Newsletter

Notizie e approfondimenti sugli avvenimenti politici, economici e finanziari.

Iscriviti