AuctionBytes Blog
Covering auctions, collectibles and marketplace selling.

AuctionBytes Blog The AuctionBytes Blog has been giving a voice to online merchants since its launch in 2005. Named one of the world's top 30 blogs in 2008 by "Blogging Heroes." Weigh in with your thoughts on the joys and pitfalls of selling online.
Wed Dec 30 2020 16:36:46

Scammers Go Smishing to Exploit Shipping Delays

By: Ina Steiner

Sponsored Link

If you get a text from the USPS or other carrier, think twice before clicking on links contained in the message. Fraudsters are exploiting holiday shipping delays with "smishing" campaigns sent via text messaging.

Like phishing emails, smishing texts are made to look like they are coming from a trusted source. Our social media channels are filling up with examples of smishing texts buyers and sellers have received made to look like they're sent by USPS about recent shipments.

A reader sent us an image of a text they saw a seller post on Facebook. It read as follows (with certain details redacted):

"USPS: (name), your parcel (number) was supposed to be delivered before Christmas. Clam here- (URL) and claim compensation."

The US Postal Service Inspector General's office had warned the USPS about smishing activity after seeing an article on TripWire.com in September. The Postal Service responded with a "smishing awareness campaign" to the public on the Postal Inspection Service website in October.

The USPS also said its Corporate Communications department would work with the Postal Inspection Service to promote awareness of smishing campaigns across Postal Service social media channels and alert customers of these events on usps.com, to the extent possible.

"Management will, at least monthly, link to the Postal Inspection Service's website and online information as it becomes available. The target implementation date is February 2021," the USPS wrote in its response to the Inspector General.

Smishing texts, just like phishing emails, attempt to trick users into clicking on links that are connected to fraudulent sites that could steal credentials or propagate malware.

Such attacks are not new. In fact, the FTC published a post in February, "Is that text message about your FedEx package really a scam?" It published a graphic of a text message reading, "Hello James, your FEDEX package with tracking code GB-6412-GH83 is waiting for you to set delivery preferences: (hyperlinked URL)."


Above: FTC warns consumers about smishing text messages. 

As usual, scammers exploit current events, and with the chaotic holiday shopping leading to severe delivery delays, buyers and sellers may be more easily tricked into clicking on links.

The FTC offered the following tip: "If you get an unexpected text message, don't click on any links. If you think it could be legit, contact the company using a website or phone number you know is real. Don't use the information in the text message."

If you see examples, please feel free to share them in the comments below. Seeing the various approaches scammers take can help us all stay on guard.



Comments (2) | Permalink

Readers Comments

Perminate Link for Scammers Go Smishing to Exploit Shipping Delays   Scammers Go Smishing to Exploit Shipping Delays

This user has validated their user name. by: COVID-19

Wed Dec 30 19:15:29 2020

Impatient moron buyers deserve what they get.  Private sellers ≠ Amazon, OK?

Perminate Link for Scammers Go Smishing to Exploit Shipping Delays   Scammers Go Smishing to Exploit Shipping Delays

by: Snapped This user has validated their user name.

Wed Dec 30 20:10:44 2020

Do you believe the sender - who as represented presumably already has an established method to convey or provide what you seek on relative demand - would expend the energy to ‘benevolently’ contact you with unsolicited ‘helpful’ information and then, instead of just including it, then require you to contact them by alternate means to receive it?

Ok then.



Login is required to post comments.
To sign in to leave a comment, fill in the form below. If you have not yet signed up for AB Verify, or if you'd like more information, go to the Registration Page
.

Login for AB Verify
Be sure and use your email address and password to log in.

 
Email:
Password:
 
 Forgot Your Password?
 Even though you are signed in with the AuctionBytes Blog, you will have to sign in to the EcommerceBytes blog. But you can sign in with your existing AB Verify info.