CYBER CRIME: Your Package Could Not Be Delivered

SCAMS are the order of the day. Every month SMS or email or any type of fake messages are sent which seek, in the vast majority of cases, to attain bank details or credentials.

There is a new scam circulating, one that pretends to be Correos, the Spanish postal service.

The new scam passes for the postal service in a SMS

While different platforms such as Outlook or Gmail have filters that eliminate almost all the e-mail spam sent, in the case of SMS the filters are not so effective and tend to appear above board which also means they have a higher open rate.

The sending of personalised SMS can be done in the form of campaigns, in such a way a message can be sent to thousands of numbers, all at the same time with the same link.

Using this mechanism, a spam campaign has been sending out the following SMS to hundreds of users, with the following text:
“Dear customer, your package could not be delivered on 11/10 because customs fees were not paid (€ 1). Follow the instructions:”

“Estimado cliente, su paquete no se ha podido entregar el 11/10 porque no se han pagado las tasas de aduana (€ 1). Siga las instrucciones:”

The instructions take the user to a shortened link.

When entering the URL a page will load with the mail logo and a message that says “Payment of customs fees”, where a box needs to checked to identify that the user is not a robot and adds authenticity to the scam.

On the next page bank card details to pay that supposed euro for customs are requested, but in reality the bank details are for the scammer to use as he or she pleases.

It’s recommended NOT to click on the URLs received from courier companies. Legitimate courier companies send a SMS with the tracking number, which can be used to manually track on the couriers’ website.

So be careful with opening URLs received in a SMS