Cybersecurity firm Proofpoint has published data showing that over half of “smishing” attempts in the UK over the last 90 days—that is, fraudulent texts pretending to be from genuine companies—related to parcel deliveries.
In the last 30 days, the proportion went up to over two thirds.
According to the data, there are now three times the number of parcel delivery messages as there are texts pretending to be from your bank.
However, the personal information gleaned from these fraudulent parcel delivery texts—when targets click on a link and submit information--is often used for further fraud attempts, including bank transfer scams. This makes the fakes harder to spot.
Credit: NordWood Themes
Fraud websites may use fake branding and stolen assets such as images and text, to make them look like the real thing.
Always be on the alert when you receive any requests to transfer money, especially when you have not arranged a parcel delivery with the supposed company in question or knowingly made a purchase from a seller abroad (which is when customs fees might apply).
If you are in doubt, don’t seek verification using any of the contact information in the text or email, or through the website link provided by the sender. If it’s a well-known company like DPD or Royal Mail, go to their website directly for advice on how to spot fakes or how to get in touch.
For more information, please refer to our fraud page.
You can report a fraudulent text by forwarding it to 7726 (the numbers on the keypad that spell out SPAM). You will not be charged.