PERSONAL FINANCE

’Tis the season for making merry – or in some cases, making mischief, especially on the Web.

Whether you’re shopping online or just checking your personal e-mail, don’t get financially fooled this holiday season.

The hectic holidays, when people are hurrying and hunting for bargains, are especially ripe for online rip-offs, experts say. There are the phony FedEx and UPS e-mails, describing a package delivery waiting for you.

The fake bank e-mail, warning that your account is overdrawn. The heartfelt appeal – seemingly from a favorite charity – asking you to donate as little as $5 by clicking a link. Not to mention all the pseudo-shopping sites masquerading as the real thing.

It’s what’s known as “phishing,” posing as a legitimate Web site in order to entice you into entering your credit card, Social Security or bank account numbers. Or they’ll lure you into clicking on an e-mailed link, which then unleashes all sorts of nasty spyware and malicious gremlins into your computer.

How to avoid online dangers?

•Be sure your computer is loaded with up-to-date firewall, anti-virus and anti-spyware software and spam blockers. When your computer system sends a message asking you to download the latest free security update, don’t ignore it.

•Pay close attention to the Web address of incoming e-mails. A fake message from PayPal, for instance, may change a letter or add a suffix. It could read “PayPlal,” with an extra letter included. Or “Amazon- account.com” with an extra word tossed in.

•Be wary of friendly-sounding subject lines like “Happy 2008!” or “Christmas Blessings” from odd-looking Web addresses. Don’t open any attachments unless you’re sure who it’s from.

•If you bank online, log into your account often to check for fraudulent charges.

•Check the Web address to be sure it’s recognizable. Don’t click on a link to a store’s site; type it yourself to be sure you’re on the real Macy’s Web site, not a phony one.

•Be sure there’s a “Privacy Policy” at the bottom of the retailer’s home page, explaining where it may share your information. If the privacy policy is not there, take your business elsewhere.

•Don’t use a debit card online. If someone gets access to your card, your bank account could be drained quickly.

McClatchy