Security | December 16, 2019
Australia Post SMS Scam
With millions of parcel deliveries expected around the country, Australia Post is seeing widespread scam text (SMS) messages being sent to people, using their brand.
These fake SMS messages may tell you that your parcel is ‘detained’, ‘you’ve missed a delivery’ or there’s an ‘important update’ to your delivery – and include a link to click on for more details. As scammers use technology that imitates a caller ID, these scam texts can even appear in the same conversation thread as a legitimate Australia Post conversation.
By clicking on the links in a scam message, you are usually taken to a fake Australia Post website to enter your personal or financial details. Clicking on these links can also infect your device with malicious software.
Does this affect me?
Anyone can be a target, whether you are waiting for an Australia Post delivery or not. Scammers cast their net wide, hoping to catch someone out who might be waiting for a parcel delivery this holiday season.
How to keep safe
To protect yourself from scam text messages or other fake messages that use Australia Post branding:
- Check if the message is legitimate by contacting the organisation it claims to be from. Use contact details that you find separately to those provided in the message (for example, manually type the official website into your browser to find the business’ contact details).
- Look at the web link without clicking on it, to see if it is an Australia Post web address or not.
- Look out for an unusual sense of urgency including demands for payment.
- Think before you click and never provide your personal or financial details by reply SMS or email.
Remember – Think before you click!
Regards,
The 2Gen Security Team