Seasonal Phishing: Tax Time, Holidays and Big Events
Phishing follows the calendar: tax refunds, holiday deliveries, open enrolment, sports events and year-end. Which themes to expect when, and how to prepare.
Phishing campaigns follow the calendar because relevant messages get more clicks. A tax refund email during tax season, a delivery text before the holidays, or a benefits update during enrolment all feel expected. Knowing what is coming helps you and your team stay ahead.
A phishing calendar
| Period | Common phishing themes |
|---|---|
| Tax season | Refunds, penalties, tax documents to "download". See tax agency phishing |
| Big shopping days | Order confirmations, payment failures, fake deals |
| Holidays | Delivery problems, e-cards, gift card requests. See parcel texts |
| Benefits enrolment and pay reviews | HR portals, salary letters. See HR phishing |
| Year-end | Invoices, supplier bank changes. See invoice phishing |
| Back to school | Student portals, fees. See education phishing |
| Major sporting events | Tickets, streaming links, betting |
| Disasters and news | Donation appeals, relief grants |
How to prepare
- Before each season, remind family or staff of the themes to expect.
- Track orders and tax matters only in official apps and portals.
- For businesses, confirm supplier bank changes by phone, especially at year-end.
- Keep the report button handy and encourage reports.
Got a seasonal message? Paste it into CyberWatch AI Scan for a free check.
Related: seasonal scams. For more, read our complete guide to phishing.
Frequently asked questions
When is phishing most common?
Around busy periods such as tax deadlines, major shopping days and holidays, when people expect related messages.
Should organizations warn staff before these periods?
Yes. A short reminder about the themes to expect before tax season, holidays or year-end is simple and effective.
Do seasonal themes differ by country?
The themes are similar, but timing follows local tax years, holidays and events.
Sources
- What To Know About Tax Identity Theft, US Federal Trade Commission
- Online Shopping, US Federal Trade Commission
- Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
