内容来源：https://lifehacker.com/money/beware-these-black-friday-shopping-scams?utm_medium=RSS

内容总结：

【年终购物季警惕AI诈骗新套路】“黑色星期五”与“网络星期一”年终大促来临之际，网络安全专家发布紧急提醒：利用消费者抢购心理的诈骗手段正借助人工智能技术升级迭代，虚假网站、深度伪造广告等新型骗局让消费者防不胜防。

据麦卡菲最新数据显示，近半数美国消费者曾在购物时遭遇AI诈骗，包括利用明星深度伪造视频推广虚假促销活动、仿冒知名品牌搭建以假乱真的钓鱼网站等。安全专家指出，诈骗分子正是利用消费者对限时优惠的急切心理，通过伪造的紧迫感降低受害者警惕性。

当前需重点防范三类诈骗手段：

1. 仿冒网站陷阱：诈骗团伙盗用知名品牌商标、产品图片，利用AI快速生成含客服页面、用户评价的虚假购物网站，专门窃取用户账户密码与支付信息；
2. 深度伪造带货：通过AI换脸技术伪造网红、明星在社交平台推广“独家优惠”，点击链接即跳转至钓鱼网站；
3. 搜索劫持攻击：诈骗方通过黑帽SEO手段劫持“黑五”关键词流量，在搜索引擎投放虚假促销广告，仿冒店铺常以“赞助链接”形式出现在搜索结果前列。

此外，传统诈骗形式如“快递包裹支付验证”“账户安全确认”等钓鱼短信仍持续活跃，这些信息通常包含指向虚假链接的短网址，诱导用户泄露银行卡信息。

安全专家建议消费者采取以下防护措施：

• 对“限时秒杀”“库存告急”等营销话术保持警惕，异常低价商品需多方比价验证
• 避免直接点击邮件、短信中的促销链接，应手动输入官网地址查询活动
• 仔细核查网站域名真伪（注意形近字母的钓鱼域名），确认网站备案信息及隐私政策
• 社交平台推广内容需核查发布者账号注册时间、历史内容及认证标识
• 拒绝使用礼品卡、加密货币等不可追溯的支付方式，优先选择信用卡交易
• 切勿在未验证网站安全性的情况下输入账户密码，包括所谓“物流验证”“账单修复”等场景

年终购物狂欢时节，消费者更应保持清醒，谨记“天下没有免费的午餐”，守住钱袋安全比抢购低价商品更为重要。

中文翻译：

假日购物季正是诈骗分子活跃的温床。消费者忙着抢购年度最大折扣时，往往容易忽视潜在的诈骗陷阱。安全研究人员警告，随着"黑色星期五"和"网络星期一"购物热潮来临，相关诈骗案件正呈上升趋势。欺诈者深谙如何利用消费者对限时优惠的迫切心理，而人工智能技术更让这些骗局变得愈发难以辨识。

McAfee最新数据显示，近半数美国消费者在购物时遭遇过AI诈骗，从利用深度伪造技术冒充名人推销商品，到以几可乱真的仿冒网站窃取信用卡信息，手段层出不穷。以下是今年"黑五"需要重点防范的诈骗类型：

仿冒网站诈骗
欺诈者常利用虚假零售网站和促销页面设陷，这些看似正规的页面实则为窃取用户登录凭证与支付信息的骗局。通过盗用知名品牌的商标和产品图片，辅以AI技术快速生成客服页面和用户评价等元素，诈骗分子能轻易搭建出以假乱真的商业网站。

AI换脸诈骗
当你在TikTok等社交平台看到网红或明星推广限时优惠时，画面中的人物可能是深度伪造的虚拟形象。一旦点击链接参与活动或购买商品，就会跳转至专门窃取钱财的虚假页面。

谷歌公司11月发布的欺诈警示报告指出，诈骗分子会通过劫持"黑五"搜索关键词、投放虚假广告或在社交媒体推送优惠等方式吸引关注。虚假店铺常以赞助商链接形式出现，购物心切的消费者极易中招。

此外，还需警惕要求支付运费以"解决投递问题"的虚假物流通知，以及诱导确认个人信息的账户验证骗局。这些网络钓鱼短信通常冒充正规企业发送欺诈链接，旨在套取用户的银行账户及密码信息。

识破"黑五"骗局要点
面对假日促销需保持冷静，注意甄别以下常见诈骗特征：

• 警惕制造紧迫感的话术，如"限时抢购""库存告急"等
• 对价格远低于市场行情的"独家优惠"保持戒心
• 通过搜索引擎核实陌生商家资质，查阅第三方评价
• 避免直接点击邮件、短信或社交媒体的促销链接，应主动访问官网核实
• 仔细检查网址真伪（注意防范使用相似字符的钓鱼网站）
• 查验社交平台推广账号的注册时间、历史内容及认证标识
• 拒绝要求使用礼品卡、加密货币或银行转账的支付方式（信用卡消费具有反欺诈保护）
• 切勿在未核实网站可信度前输入账户密码，包括应对所谓"账单或物流问题"时要求验证的快递及支付平台账户。

（翻译说明：通过拆分英语长句为符合中文阅读习惯的短句结构，将被动语态转换为主动表述，运用"温床""几可乱真""心切"等符合中文语境的地道词汇，并采用分项列举方式重组信息层次，在保持专业性的同时增强文本可读性。针对英文文化特定概念如"Black Friday"保留通用译名并添加引号强调，对"phishing and smishing"等专业术语采用约定俗成的"网络钓鱼短信"译法，确保中国读者能准确理解网络安全风险。）

英文来源：

Holiday shopping season is ripe for scammers, as consumers rush to find and take advantage of some of the best discounts of the year, and potentially overlook red flags that signal fraud. Security researchers are warning of an uptick in scams capitalizing on the Black Friday and Cyber Monday hype. Fraudsters know that they can prey on shoppers' sense of urgency and excitement for limited-time, exclusive deals—and AI is making these campaigns even more difficult to spot than usual.
New data from McAfee suggest that nearly half of Americans have come across an AI-powered scam while shopping, from deepfakes impersonating celebrities pushing promotions to near-flawless spoofed websites that steal your credit card information.
Here are the scams to watch for this Black Friday.
Black Friday shopping scams
Spoofed websites are a common type of a scam, and fraudsters use holiday shopping season to trap users with fake retail sites and sales pages that look legitimate but are actually just collecting data like your login credentials and payment information. Scammers will use stolen assets like logos and product photos from known and trusted brands, and AI makes it easy to set up a convincing (but fake) small business website with elements like a customer service page and consumer reviews in no time.
Another shopping scam facilitated by AI is the impersonation scam. You think you're watching a popular influencer or celebrity promoting an exclusive deal or product giveaway on TikTok or another social media platform, but it's actually a deepfake. If you click through to enter or buy, you'll land on a counterfeit page (as outlined above) designed to steal from you.
According to Google's November fraud and scam advisory, scammers can get eyes on their content by hijacking search terms for Black Friday sales, running deceptive ads, or pushing deals on social media. Fake storefronts may appear as sponsored links, which are easy to overlook if you're in a rush to make a purchase.
Of course, you may encounter other common holiday scams, such as fake shipping notifications that request payment in order to resolve a delivery issue as well as account verification scams that prompt you to confirm personal details. These phishing and smishing campaigns use standard scam tactics like impersonating a legitimate company or service and sending a fraudulent link that collects your bank information or username and password combination.
Black Friday scam red flags
When shopping holiday deals, slow down enough to look for common signs of scams. Fraudsters will use urgency—such as a limited time to secure a deal or a limited number of items left in stock—in hopes you won't think before you buy. You should also be wary of any deal that is too good to be true, or a promotion with especially low prices that are out of line with other sales on similar items. This includes influencers pushing "exclusive" opportunities. If you are purchasing from a small business you don't know, google the brand and read third-party reviews to see whether it is legitimate.
Instead of clicking links from emails, texts, and social media posts promoting sales, go directly to the retailer's website and search for the deal. If you do click through, check the URL carefully to ensure it is legitimate (scammers may use homoglyphs that avoid detection at first glance) and look for website elements that real companies have, such as a privacy policy and address. If you see a promotion on social media, check the creator's account to see when they joined the platform, what they've posted in the past, and whether they are verified.
Beware of any site that requires you to pay with a gift card, cryptocurrency, or bank transfer versus a credit card, which has some protection in the case of fraud. Legitimate retailers will use legitimate payment methods.
Finally, never enter your login credentials unless you've confirmed that the site you're using is trustworthy. This includes delivery services and your Amazon and PayPal accounts, all of which scammers may pressure you to "verify" in order to resolve a billing or delivery issue.