Threat Deep Dive: Fake Delivery Texts and How to Avoid Them
Fake delivery texts and emails are one of the most common scams in the UK, and they catch people every day. The message usually says a parcel couldn't be delivered and asks you to pay a small redelivery fee, often around two pounds. It looks like it's from Royal Mail, Evri, or another well known courier.
The link in the message goes to a fake website that looks like the real thing. When you enter your card details, you're not just paying a small fee. The criminals can keep charging your card, or sell your details on to other fraudsters.
Royal Mail and Evri both say they will never ask you to pay a delivery fee by text or email. If you're waiting for a parcel, check its status through the retailer's app or the courier's official website. Type the address in yourself, or use a bookmark you already have. Never use the link in the message.
If you've already entered your card details, call your bank straight away using the number on the back of your card. Tell them what happened. They can stop the card and watch for unusual payments. It's always better to call quickly.
You can report suspicious texts by forwarding them to 7726, which spells SPAM on a keypad. This is a free service used by UK mobile networks. You can also forward suspicious emails to the National Cyber Security Centre at [email protected].
In other news, Microsoft has confirmed a flaw in Exchange that lets an authenticated attacker read other users' mailboxes. This mainly affects organisations running their own Exchange servers, so it's one for IT teams to address. For home users, turning on two step verification for your email account is a sensible step.
Researchers have also flagged new attacks on NetScaler and FortiMail devices. These are business products, so again, one for the IT department to patch.
Your one action this week: if you get a delivery message you're not expecting, don't click the link. Open the courier's official app or website and check there.
Related reading