The rapid development of e-commerce has driven the increasing use of online shopping apps with various promotional and discount features as digital marketing strategies. While these features are effective in increasing purchase interest and transaction volume, their presence also has the potential to increase cybersecurity risks, especially during major promotional periods. Threats such as phishing, personal data theft, account hacking, and voucher manipulation often exploit users' impulsive behavior focused on price advantages. This study aims to explore users' experiences, perceptions, and responses to cybersecurity risks that arise when using promotional and discount features in online shopping apps, as well as to identify the types of threats and their triggers. This study used a descriptive qualitative method with a phenomenological approach. Data were obtained through case documentation, digital security incident reports, and a review of literature relevant to cybersecurity and e-commerce. Data analysis was conducted through data reduction, grouping themes, and interpreting phenomena based on user experiences. The results show that cybersecurity risks increase significantly during major promotional periods due to high user traffic and low consumer vigilance. Promotional and discount features are often exploited by cybercriminals through fake links, fictitious pop-ups, and voucher redirects, resulting in losses such as lost account access and unauthorized transactions. This study concludes that cybersecurity in online shopping applications depends not only on technological systems but also on user behavior and security literacy. Therefore, an integrated mitigation strategy is needed through strengthening application security systems and improving digital security education for users.