2025 Retail Holiday Threat Report: Scams and Impersonation Attacks Targeting Retailers

PreCrime Labs (BforeAI) tracked pre-December 2025 holiday-themed cybercrime activity and identified 1,728 suspicious or malicious domains registered from 15 September–10 November 2025 used for phishing and fraud targeting holiday shoppers; observed techniques include DGA-style bulk registrations, spoofed storefront and app pages, paid Google Ads, Telegram coupon channels and social media impersonation, with a forecasted surge in December around major sale events and broader regional targeting (e.g., Diwali, Indian retail events).