We’ve been trained to expect and look out for spam emails. But now, scammers are sending realistic-looking text messages (like the one above) posing as shipping and package delivery companies such as FedEx.
This isn’t the first time that spammers have used SMS to send out fake messages, but more people appear to be receiving this specific package delivery scam message. As the recipient of one such attack, we decided to open the link and see what exactly is being shared. We DO NOT recommend you open the message or click on any links. Instead, you should immediately block the sender and delete the message.
After you click on the link, you’re taken to an obviously-fake Amazon listing and asked to take a customer satisfaction survey. As a thank you for answering some questions, you’re given the opportunity to claim an “expensive” product for free as a reward.
Now it’s time to tell the spammer where you live and provide them with a credit card number. As you can see, the “reward” is free but you still need to pay a small shipping and handling fee.
The real scam resides in the fine print. By agreeing to pay the small shipping fee, you’re also signing up for a 14-day trial to the company that sells the scammy products. After the trial period, you will be billed $98.95 every month and sent a new supply of whatever item you claimed as a reward.
Again, you should never click on a link that you think is coming from a spammer. And if you do accidentally open the link, you should definitely never enter your credit card number or provide the site with personal information.
Take a look at the below tweet if you think you’re good at identifying fake and real shipping messages. One of the screenshots is an identical message to the one we received and the other is a legitimate shipping notification.
At first glance, which one is legit and which one isn't? pic.twitter.com/UqDjnSxDd2
— The Cyber (@r0wdy_) January 17, 2020
If you’ve become the target of these types of spam messages, we recommend blocking the number immediately. iPhone and Android users both have access to built-in spam-blocking tools that should help cut down on the number of fake messages.
Be safe out there!