The holiday season is a prime time for identity thieves who are looking to prey on your information. It’s the time of year when we make many transactions, and we’re so distracted that we might not notice our personal information is being stolen. At the beginning of 2025 the Identity Theft Resource Center reported that there were 1.3 billion notices of compromised data in 2024.  Identity theft can be a frightening experience, but you don’t have to let identity thieves ruin your holiday cheer. Here are seven precautionary steps you can take to ensure your identity is protected.

1. Scrutinize Your Email and Watch Out for Phishing

Beware of phishing, a tactic in which spam mimics legitimate banks or businesses to obtain your personal information and access your accounts. When you’re shopping online this month, always make sure you’re on a familiar website of a legitimate retailer before entering personal data, and ignore unfamiliar or unsolicited emails containing links promising great deals.

2. Use a Prepaid Debit Card

When purchasing gifts this month, use a prepaid debit card so you won’t lose direct funds from your bank account if your information is compromised. These cards are extremely unlikely to become compromised, and if they do, the worst-case scenario is that you will lose whatever balance is left on the card. This card will not link back to your bank account or any personal information.

3. Secure Your Information Online

Many of us use our personal information when holiday shopping online. With so many account numbers and passwords out there, it’s easy for an identity thief to retrieve your information. Exercise caution when completing online orders and use discretion when providing information. Reset your logins and passwords monthly, especially if you’re shopping from a public computer. Also, make sure to use the strongest passwords possible. Alternatively, you could use a password vault like 1Password or Bitwarden to generate and remember strong, unique passwords for you.

4. Buy a Shredder for Sensitive Documents

If you want to buy yourself a gift this holiday season, consider purchasing a cross-cut shredder, ideally one that can also cut through plastic credit and debit cards. A good shredder will turn any document into tiny, unreadable scraps in a matter of seconds—much better than ripping it with your hands. Anything that has a signature, account number, Social Security number, or medical or legal information should be shredded, such as expired credit and debit cards, credit card statements, pre-approved credit offers, canceled checks, and medical bills. The U.S. Supreme Court has indicated that someone can legally dig through your trash (California v. Greenwood), which means people looking for your personal information can find it unless you take the necessary precautions.

5. Review Your Bank and Credit Card Statements Carefully

Watch for suspicious activity on your bank and credit card statements. You should be reviewing statements year-round, but with likely more purchases at the end of the year, you’ll want to make sure something hasn’t been slipped in. If there are charges that are not yours, contact your bank or credit card institution immediately. Monitor for random minor charges of less than a dollar or two from unfamiliar companies or individuals. Thieves often test stolen credit card numbers by sending a small charge through, sometimes for only a few pennies. If the first charge succeeds, they'll buy the stolen data and make a much larger charge or purchase.

6. Do Not Overshare on Social Networks

Be wary of sharing sensitive information on social networks. Don’t share personal information like your address, birth date, phone number, Social Security number, or birthplace online. During the holidays, many of us travel or attend social functions, and we may feel tempted to post details about our location in the name of holiday cheer. It’s better not to post too much information. While sites like Facebook, Instagram, and TikTok may have privacy filters, they aren’t always foolproof, nor do they extend to other online databases where you may have personal information stored. Consider restricting access to your social sites to a small network of people and limit what you share. Always err on the side of caution when it comes to your personal information. If you become a victim of identity theft, act immediately by going to IdentityTheft.gov, where the entire recovery process will be walked through for you.

7. A.I. and Identity Theft

Every day, artificial intelligence seems to improve. Fraudsters have taken advantage of this to try to obtain your personal data. As of now, some A.I.-related threats include deepfakes and voice cloning, but in a few years, there could be new threats. “Deepfakes are videos or images that have been digitally altered—often using AI—to realistically portray someone saying or doing something they never actually said or did.” (Consumers Bank) Voice cloning uses A.I. to mimic someone else’s voice. It is very important to stay educated on potential A.I. scams as this technology advances.

You can also place a fraud alert or freeze your credit with the following credit reporting agencies: Equifax, Experian, and TransUnion. No one is immune to identity theft but armed with the right knowledge and a little common sense, you can do your best to prevent it and enjoy the holidays peacefully.