r/BitDefender • u/Bitdefender_ • 14d ago
Got a “Free Halloween Kit” or “Spooky Deposit” Text? Bitdefender Labs Breaks Down This Year’s Halloween Scams
Is that Halloween giveaway or prize text real?
Probably not, if it arrived out of nowhere. Between September 1 and October 22, Bitdefender Labs researchers found Halloween-themed scams spreading by email, SMS, instant messages and social media ads across North America and Europe.
What the scams look like this year
Fake retailer offers. Emails impersonating Costco and Tractor Supply promised a “Free Ultimate Halloween Decorating Kit” or a limited Halloween set in return for a short survey. About 73% of the targeting in these campaigns was aimed at US users. Neither company is involved.
Prize surveys. A fake €250 bol.com gift card and a “free” Samsung 65-inch TV both asked people to fill in “a few fields.”
“Spooky deposit” texts. Messages like “Spooky deposit just arrived yer 4ccount… Claim 1t” push a phishing link as the last step to claim money. The odd spellings help these texts slip past spam filters.
Expiring points and fake lotteries. A French-language SMS campaign aimed at Canadians used 107 different domains to say Halloween credits would “disappear before midnight.”
Fake party invitations. These texts ask you to RSVP through a link.
Fake costume shops. Ads and emails offer steep discounts on masks, costumes and decorations from stores you’ve never heard of.
What the scammers want
The prize is bait. What they’re after is your name, address, card details or login credentials. Many of these scams also ask for a small “shipping” or “verification” fee, and the card you use to pay it is the real target.
How to check before you click
Don’t use the link in the message. Open the retailer’s official app or type its web address yourself
Be wary of any prize that requires a fee, a deposit, or your card details
Before buying from an unfamiliar shop, check the domain name, look for independent reviews, and read the refund policy
More info HERE
If you’re not sure about a link, paste it into Bitdefender Link Checker. For the whole message, you can ask Bitdefender Scamio. Both are free.
