As if scam calls and spam filled inboxes aren’t enough, now we have to be on the lookout for texts…
Welcome back to the blog! This Monday, CPG is taking a look at a recent scam circulating in the US.
To begin, the latest scam involves fake FedEx confirmation texts to unsuspecting patrons. Further, random people are receiving a text to confirm a Fedex package, whether they actually ordered something or not.
Phishing and Scamming
Reports of this scam are currently popping up all over the country, but the plot is the same. Citizens receive a text that states the following.
We found a package from May that is owed to you. Kindly claim ownership and claim for delivery here *insert malicious link*.
The goal of this phishing ploy is for the unsuspecting recipient to click the link to verify a package.
Continuing, this type of scam involving delivery text is quite common, especially during the pandemic. Many people are staying home and shopping even more online.
This allows a unique window for hackers to take advantage of. Someone may be ordering multiple items from multiple businesses. All of which may use different shipping services to deliver orders.
Thus, making it almost impossible to keep track of what is coming from where.
So, this leads into the idea that people may not be as suspicious as they should over texts like the one pictured above.
What Happens if you Click the Fake FedEx Link?
Continuing on, many may now be wondering what happens when you click the link. Well, a few scenarios may occur, depending on the method of bait and hook.
One example is that the link directs the victim to a decent looking copycat page of FedEx. Here, it may ask the person to confirm various personal details in order to confirm and receive their package.
For example, the fake prompt may ask for full name, address, phone number. All the basic information a delivery service may need to confirm identity. But, some also go as far as to ask for social security numbers as well.
This should always be a red flag. Services such as FedEx would never ask to confirm such details via text message. For more information on phishing scams and alerts from FedEx, you can visit their help page here.
Another example of what would happen if you click the link could be they ask you to verify payment information. This is yet another example of exactly what FedEx would not do, but scammers will.
Further, the scammers may throw out a line asking for payment information confirmation to validate the package and shipping. This may seem legitimate, but a delivery company would never validate payment information for you. This would fall back to the source of your purchase, not FedEx.
How to Protect Yourself
Overall, just receiving the text will not cause any harm to your device. I recommend blocking the number the text came from as well as deleting the message all together. This prevents the sender from contacting you in the future. As well as eliminating the mistake of clicking the link by accident.
The main lesson here is to always double check your sources when receiving messages like this. You always have the option to validate shipping information directly with a company that you placed an order with.
So, stay alert, validate messages and sources and keep an eye out for suspicion messages!
By Taylor Ritchey
If you ever receive a spam message that you would like to report these are the following options.
Report it to your provider at 7726 (SPAM) and to the FTC at ftc.gov/complaint or 1-888-382-1222.