Skip to content

SCAM OF THE WEEK: Smishy Package Failed to Deliver

Recently, cybercriminals have been impersonating postal services around the world through SMS phishing (smishing) scams.
MK-CO360_USPS_GS_20140804204246

These postal services include the US Postal Service, UK Royal Mail, Correos in Spain, and Poste Italiane in Italy. In this scam, cybercriminals send you a text message impersonating the postal service in your country. The text contains a link and says that your package can’t be delivered until you provide additional information. If you tap the link, you’ll be taken to a spoofed postal service website that prompts you to enter your credit card details so your package can be delivered. If you enter your credit card details, cybercriminals could steal your money or personal information. Follow the tips below to stay safe from similar scams:

  • Never tap a link in a text message that you weren’t expecting. 
  • Be cautious when entering payment information on a website accessed via text message. To stay safe, navigate directly to the organization's official website.
  • Remember that this type of attack isn’t exclusive to postal services. Cybercriminals could use this technique to impersonate any business in any country. 

Content provided by KnowBe4