---
title: "They Should Call Black Friday Phish Friday | DuoCircle"
description: "It’s the most wonderful time of the year…for hackers."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/phishing-protection/they-should-call-black-friday-phish-friday/"
---

Quick Answer

Phishing volume rises sharply around Black Friday and Cyber Monday because attackers exploit the surge in legitimate retail email. Global Security Mag reported a 400% increase in pre-holiday phishing aimed at well-known online shopping sites in 2019\. The dominant tactic: clone a real retailer's site, drive traffic to it via spoofed promotional emails, and capture credit card details at checkout. McAfee research found 37% of US shoppers do not check sender addresses or retailer URLs for authenticity, which is what makes the campaigns profitable. Defenses for individuals: type retailer URLs directly rather than clicking email links, look for the padlock plus the actual domain (not a lookalike), use a credit card with strong fraud protection rather than a debit card. Defenses for retailers: deploy DMARC at p=reject on every sending domain so attackers cannot spoof your brand back at your customers.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fphishing-protection%2Fthey-should-call-black-friday-phish-friday%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=They%20Should%20Call%20Black%20Friday%20Phish%20Friday&url=undefined%2Fblog%2Fphishing-protection%2Fthey-should-call-black-friday-phish-friday%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fphishing-protection%2Fthey-should-call-black-friday-phish-friday%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fphishing-protection%2Fthey-should-call-black-friday-phish-friday%2F&title=They%20Should%20Call%20Black%20Friday%20Phish%20Friday "Share on Reddit") [ ](mailto:?subject=They%20Should%20Call%20Black%20Friday%20Phish%20Friday&body=Check out this article: undefined%2Fblog%2Fphishing-protection%2Fthey-should-call-black-friday-phish-friday%2F "Share via Email") 

![black friday phishing friday](https://media.mailhop.org/duocircle/images/2019/11/spf-record-generator-7436.jpg) 

_It’s the most wonderful time of the year…for hackers_. And while all indications are that hackers are actually getting started early this year with phishing emails, you can expect Black Friday and Cyber Monday to be the main events.

[![Global Security Mag](https://media.mailhop.org/duocircle/images/2019/11/what-is-dkim-4356.jpg)](https://media.mailhop.org/duocircle/images/2019/11/what-is-dkim-4356.jpg)

According to [Global Security Mag](http://www.globalsecuritymag.com/The-dark-side-of-Black-Friday-and,20191122,92994.html), “Black Friday and Cyber Monday marks the traditional start to the holiday shopping season. Yet, with 39% of shoppers starting before then, cybercriminals have kicked off the season early too.” Their research indicates a **400% increase** in pre-holiday phishing activity specifically targeted at “well-known online shopping sites.”

These holiday **phishing attacks** are about one thing: getting your credit card number. The scammers start by putting up a replica of a legitimate site. Then, from [WJLA](https://wjla.com/news/nation-world/phishing-scams-beef-up-just-in-time-for-the-holiday-season), “_once you enter your credit card information into one of these fake shopping sites, the scammers win._”

You’d think by now everybody would be onto these scams, but they’re not. According to [research](https://www.mcafee.com/enterprise/en-us/assets/infographics/infographic-mcafee-christmas-carol-scam-edition.pdf) conducted by McAfee, “_37% of American respondents admit that they don’t check an email sender or retailer’s website for authenticity._”

> The result of this reckless behavior? “_74% of respondents admitted to losing more than $100 to these scams, while 30% lost more than $500._“

One of the newer ploys these scammers use is **phony gift cards**. And unfortunately, it’s effective too. “_The survey found that only 43% of respondents are aware of fake gift cards as a threat._”

[![phishing prevention](https://media.mailhop.org/duocircle/images/2019/11/dkim-selector-4565.jpg)](https://media.mailhop.org/duocircle/images/2019/11/dkim-selector-4565.jpg)

Two things are clear. The scammers are coming this holiday season and most people either don’t know about it or don’t care. And the crazy thing is, that same $100 that 74% of respondents lost to a phishing scam, would pay for over 25 years of [phishing prevention](/email/phishing-protection) software that kept users safe from those very same scams.

[DuoCircle](/), which is cloud-based [email security service](/) with **real-time link click protection**, is such a software. It can keep hundreds of users safe from these holiday threats for just pennies a month per user. There is simply no reason not to protect yourself, your family and your employees this holiday season.

Try **phishing protection** from DuoCircle risk free for 30 days. _It requires you to buy nothing, sets up in minutes and comes with 24/7 live technical support. Don’t let Scrooge win._

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

## Related Articles

[  Phishing 11m  AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough  Apr 28, 2026 ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/)[  Phishing 5m  10 Applications of ChatGPT that Hackers Are Already Exploiting  May 3, 2023 ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/)[  Phishing 4m  65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks  Mar 29, 2016 ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/)[  Phishing 9m  7 Ways to Protect Your Organization from Email-based Ransomware Attacks  Feb 11, 2018 ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"They Should Call Black Friday Phish Friday","description":"It’s the most wonderful time of the year…for hackers.","url":"https://www.duocircle.com/blog/phishing-protection/they-should-call-black-friday-phish-friday/","datePublished":"2019-11-28T19:21:57.000Z","dateModified":"2025-05-24T15:28:41.000Z","dateCreated":"2019-11-28T19:21:57.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/they-should-call-black-friday-phish-friday/"},"articleSection":"phishing-protection","keywords":"","wordCount":370,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/11/spf-record-generator-7436.jpg","caption":"black friday phishing friday","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Phishing"},{"@type":"ListItem","position":3,"name":"They Should Call Black Friday Phish Friday","item":"https://www.duocircle.com/blog/phishing-protection/they-should-call-black-friday-phish-friday/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Phishing","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"They Should Call Black Friday Phish Friday","item":"https://www.duocircle.com/blog/phishing-protection/they-should-call-black-friday-phish-friday/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"They Should Call Black Friday Phish Friday","description":"It’s the most wonderful time of the year…for hackers.","url":"https://www.duocircle.com/blog/phishing-protection/they-should-call-black-friday-phish-friday/","datePublished":"2019-11-28T19:21:57.000Z","dateModified":"2025-05-24T15:28:41.000Z","dateCreated":"2019-11-28T19:21:57.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/they-should-call-black-friday-phish-friday/"},"articleSection":"phishing-protection","keywords":"","wordCount":370,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/11/spf-record-generator-7436.jpg","caption":"black friday phishing friday","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```