How to Keep Online Shopping Safe

Here are a few tips to ensure that Exchange customers have the best shopping experience in stores and online.

Head shots of LTC Roshun Steele and Andrew Porterfield with text: Exchange IG & LP: eComm Fraud Prevention

Did you know e-Commerce sales account for approximately 10% of the Exchange’s annual sales, helping to provide dividends to support Morale, Welfare and Recreation (MWR) programs and increasing the quality-of-life for our service members and their families?

The Loss Prevention (LP) and the Inspector General (IG) offices are committed to ensuring the Exchange fulfills this mission.

As we enter the busiest season of the year, we want to spread holiday cheer and share a few tips to ensure our customers have the best shopping experience in our stores and online.

Tip 1: Be mindful of Phone and Phishing Scams!

Fraudsters often take advantage of heightened activity during the holidays. The Exchange is not immune to their deceptive tactics. Remember, Exchange headquarters will never call you to request or “test” system transactions over the phone. If your facility receives such a call, pause, stay in the zone, hang up the phone and immediately notify Loss Prevention.

Phishing attempts also continue to increase.. Cybercriminals exploit weak points and trick users into installing malware or granting system access. Watch for unknown email addresses, misspelled subject lines and errors within messages. Always hesitate before opening attachments. If you suspect that an email is a phishing attempt, the Exchange Outlook email has a “Report Phishing” button in the upper right corner of when you open an email. You can also send emails to spamreporting@aafes.com

As with suspicious emails, carefully check website addresses, leading us to Tip 2.

Tip 2: Double Check Websites

Creating fake websites is one of the easiest ways for fraudsters to steal information. Always verify the URL and domain before logging in or entering payment details. Even a small typo can direct customers to a fraudulent site where credentials may be compromised. Remind customers that the exchange official website is https://www.shopmyexchange.com.

To enhance online safety, the Exchange employs multiple system security features, such as multi-factor identification (MFA), CAPTCHA and bot detection. Customers are also required to enter their CVV2/C ID number (the three- or- four-digit code on their card). This information is never stored and serves as an added layer of protection against unauthorized purchases.

Tip 3: Monitor Your Financial Transactions

Fraudsters also use automated bots and other tools to access and misuse accounts. The Exchange actively combats this activity through advanced fraud-detection programs and manual reviews of suspicious e-Commerce transactions.

Even with these defenses, vigilance remains essential. Monitor your accounts regularly and report any suspicious transactions to your issuing bank or the appropriate Exchange customer service team. If you find an unfamiliar charge on your MILITARY STAR card or personal account, contact eComm customer service immediately. Our team can perform IP geolocation tracking and coordinate with law enforcement to pursue offenders.

As the holiday season approaches, the Exchange continues developing new strategies to prevent and detect fraud both in stores and online. LP and IG remain dedicated partners, fielding inquiries and collaborating with eComm teams to safeguard our operations.

The Exchange cares deeply about our safety. Rest assured that we’re working hard behind the scenes to protect our customers, associates and assets. Happy holidays!

The Exchange Loss Prevention Office and Inspector General Office are here for you! If you need any assistance or have questions regarding this article, email Senior Loss Prevention Operations Manager Andrew A. Porterfield at porterfieldan@aafes.com or Deputy Chief of Inspections LTC Roshun A. Steele at steeleros@aafes.com

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

The Exchange Post