Don’t let phony sites and apps ruin your holiday