--- title: Add festive fun to your awareness campaigns to maximise employee engagement description: Learn how to protect employees from festive phishing scams, fake websites, and social media fraud with practical tips for staying secure at work and home. image: https://thesecuritycompany.com/hubfs/Festive%20cyber%20security.webp --- [Skip to content](https://thesecuritycompany.com/blog/add-festive-fun-to-your-awareness-campaigns-to-maximise-employee-engagement#main-content) [![TSC Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=95&height=78&name=TSC%20Logo%20large.png)](https://thesecuritycompany.com/) - [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) - [Products & Services](https://thesecuritycompany.com/productsandservices) - [Success Stories](https://thesecuritycompany.com/success-stories) - [Resources](https://thesecuritycompany.com/our-resources) - [Blog](https://thesecuritycompany.com/blog) [Book a demo](https://thesecuritycompany.com/contact-us) ![Search icon](https://5018647.fs1.hubspotusercontent-na1.net/hubfs/5018647/Design/Icons/Font%20Awesome/search.svg) [Book a demo](https://thesecuritycompany.com/contact-us) [All posts](https://thesecuritycompany.com/blog/all) May 27, 2025 # Add festive fun to your awareness campaigns to maximise employee engagement   The Security Company  ·  2 minute read **The festive period is a wonderful time of year for family, friends, goodwill and, of course, presents. And as festive shopping gets into full swing, it’s a thriving time for retailers and consumer businesses.** ![Festive cyber security](https://thesecuritycompany.com/hs-fs/hubfs/Festive%20cyber%20security.webp?width=788&height=443&name=Festive%20cyber%20security.webp) But we’re not the only ones looking forward to Christmas. It’s also a very profitable time for cybercriminals as they target shoppers, businesses and online retailers with scams designed to steal valuable information. #### ‘Tis the season of scam statistics… Cybercriminals use a variety of scams to steal information, money and identities. They can sell this stolen information on the dark web for a profit or use it to commit fraud. Compared to Q3 2018, social engineering attacks increased by[233% during the festive period](https://www.proofpoint.com/us/resources/threat-reports/quarterly-threat-analysis). The majority of attacks targeted workers in marketing, public relations and human resources. Some of last year’s most clicked phishing email subjects played on our festive fears – password and banking problems – and our excitement – Amazon orders, holiday offers and delivery updates. The [top email](https://blog.knowbe4.com/infographic-q4-2018-top-clicked-phishing-email-subjects-from-knowbe4)subjects during Christmas 2018 were: | **19%** | **Password Check Required Immediately/Change of Password Required Immediately** | | --- | --- | | **16%** | **Your Order with Amazon.com/Your Amazon Order Receipt** | | **11%** | **Announcement: Change in Holiday Schedule** | | **10%** | **Happy Holidays! Have a drink on us** | | **8%** | **Problem with the Bank Account** | | **6%** | **UPS Label Delivery** | Phishing websites were more prevalent too. [Netflix-related phishing URLs increased by 25.7%](https://www.vadesecure.com/en/phishers-favorites-q4-2018/) during the festive period last year, making it the second most impersonated brand. In fact, Christmas day was the single largest day for Netflix phishing URLs in the entire year. Despite the increase in scams at this time of year, there are steps you can take to tackle those festive fiends and ensure your employees stay secure both at work and home. #### Educating employees Providing guidance that can help keep employees and their families safe at home gives them more reasons to take notice at work too. Understanding why they need to change their behaviour is also a key part of motivating employees to engage with change. **1. Phishing** Cybercriminals bank on their phishing emails slipping through filters and not being read too closely. Just one click on a scam email at work could cause financial and reputational damage to your organisation. At home, it could cause problems for the employee and their family. ***Top tip:*** *Your employees are your first line of defence so it’s vital they know how to spot the signs of a phishing email. Ensure you have email filters in place and that employees know what to do if they are unsure a request for information is genuine*. **2. Fake websites** Many employees will be connected to the office WiFi when they do some quick Christmas shopping on their lunch break. But if they end up on a fake website, they could inadvertently download malware, fall victim to bogus gift scams or have their identity stolen. ***Top tip:*** *Ensure your employees know how to spot the signs of a fake website to keep both the office network and their information secure.* **3. Social media** Most of use at least one social media platform – and cybercriminals know this. Fraudsters use social media to target us with fake adverts, illegal gift exchange schemes, and games designed to harvest your personal data. ***Top tip:*** *Ensure your employees know the risks of posting too much personal information on social media. It’s also vital they know that any data they enter in social media games could be used to crack their passwords.* **4. Security updates** Updating operating systems may seem like an inconvenience to employees, so take advantage of the Christmas downtime to make sure all vital security updates are installed. ***Top tip**:* *Ensure your employees have the latest security patches installed on their work and personal devices*. ## Related posts [![](https://thesecuritycompany.com/hubfs/Supply%20chain%20cyber%20security.webp)](https://thesecuritycompany.com/blog/supply-chain-attacks-how-secure-are-your-third-party-suppliers) [ARTICLE](https://thesecuritycompany.com/blog/tag/article) ### [Supply chain attacks: how secure are your third party suppliers?](https://thesecuritycompany.com/blog/supply-chain-attacks-how-secure-are-your-third-party-suppliers) [![](https://thesecuritycompany.com/hubfs/emerging-AI-threats-webianr-1.webp)](https://thesecuritycompany.com/blog/emerging-ai-cyber-threats-webinar) [WEBINAR](https://thesecuritycompany.com/blog/tag/webinar) ### [Emerging AI cyber threats: The next wave of attacks](https://thesecuritycompany.com/blog/emerging-ai-cyber-threats-webinar) [![Person using a mobile phone with an AI chatbot icon, representing AI chatbot risks, generative AI security and safe use of AI tools.](https://thesecuritycompany.com/hubfs/ai-chatbot-ebook-guide-1.webp)](https://thesecuritycompany.com/blog/guide-ai-chatbot-security-ebook) [eBOOK](https://thesecuritycompany.com/blog/tag/ebook) ### [Your guide to AI chatbot security](https://thesecuritycompany.com/blog/guide-ai-chatbot-security-ebook) ![](https://thesecuritycompany.com/hs-fs/hubfs/bug.webp?width=80&height=80&name=bug.webp) ![](https://thesecuritycompany.com/hs-fs/hubfs/bug_white.webp?width=80&height=80&name=bug_white.webp) Go further with emerging threat intelligence, expert analysis and guidance [![TSC White Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20White%20Logo%20large.webp?width=100&height=82&name=TSC%20White%20Logo%20large.webp "TSC White Logo large")](https://thesecuritycompany.com/) **©** The Security Company (International) Limited 2026 Office One, 1 Coldbath Square, London, EC1R 5HL, UK Company registration No: 03703393 VAT No: 385 8337 51 [linkedin-in icon](https://uk.linkedin.com/company/thesecurityco) [Home](https://thesecuritycompany.com) [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) **[Products & Services](https://thesecuritycompany.com/productsandservices)** [Contact us](https://thesecuritycompany.com/contact-us) [Privacy &](https://thesecuritycompany.com/tsc-policies)[Cookie Policies](https://thesecuritycompany.com/tsc-policies) [Terms & Conditions](https://thesecuritycompany.com/tsc-policies) **Resources** - [eBooks](https://thesecuritycompany.com/our-resources) - [Reports & Whitepapers](https://thesecuritycompany.com/our-resources) - [Cyber Security Calendar](https://thesecuritycompany.com/blog/security-awareness-calendar) - [Webinars](https://thesecuritycompany.com/our-resources) - [Blog](https://thesecuritycompany.com/blog) Copyright © 2026, The Security Company Ltd ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "The Security Company", "url" : "https://thesecuritycompany.com/blog/author/the-security-company" }, "dateModified" : "2026-06-12T10:45:53.718Z", "datePublished" : "2025-05-27T13:25:18.000Z", "headline" : "Add festive fun to your awareness campaigns to maximise employee engagement", "image" : [ "https://thesecuritycompany.com/hubfs/Festive%20cyber%20security.webp" ], "mainEntityOfPage" : { "@id" : "https://thesecuritycompany.com/blog/add-festive-fun-to-your-awareness-campaigns-to-maximise-employee-engagement", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://thesecuritycompany.com/hubfs/TSC%20Logo%20large.png" }, "name" : "The Security Company" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#organization", "@type" : "Organization", "description" : "Cyber security awareness training and human risk management for businesses of every size.", "logo" : "https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=190&height=156&name=TSC%20Logo%20large.png", "name" : "The Security Company", "sameAs" : [ "https://www.linkedin.com/company/thesecurityco/", "https://www.youtube.com/@thesecurityco", "https://vimeo.com/user31176192", "https://thecpdregister.com/providers/cpd-group-providers--790118", "https://ico.org.uk/ESDWebPages/Entry/Z4812822", "https://find-and-update.company-information.service.gov.uk/company/03703393", "https://registry.blockmarktech.com/certificates/19d457f5-bf79-4f85-8f6e-dd2db181ff76/", "https://www.gartner.com/reviews/product/the-security-company-security-awareness-training" ], "url" : "https://thesecuritycompany.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#website", "@type" : "WebSite", "name" : "The Security Company", "publisher" : { "@id" : "https://thesecuritycompany.com/#organization" }, "url" : "https://thesecuritycompany.com/" } ```