Holiday-themed emails increasingly carry scams using loan forms, fake order confirmations, and credential harvesting to collect sensitive personal and financial information.