With an increase in online shopping, partly due to the COVID-19 pandemic, product deliveries are being targeted by scammers, according to Kingston Police. Home delivery may “add a degree of convenience” to consumers, but scammers have recognized an opportunity to capitalize on this trend with smishing scams.
Through smishing, or SMS phishing, scams, cybercriminals impersonate popular home delivery companies, such as Canada Post, DHL, Purolator, etc, with fake failed delivery text messages that include a link to reschedule the delivery, according to a release from Kingston Police.
“The link included in these fake delivery notifications leads to a phony look-alike website,” the release reads. “On the website, you’re asked to provide your personal and financial information to reschedule the delivery. Unfortunately, if you fill out and submit this form, you won’t be receiving any packages. Instead, you’ll be delivering your sensitive information right to the scammers.”
Kingston Police provided these tips to protect yourself from similar smishing attacks:
- Think before you tap. Are you expecting a package? Have you signed up for text notifications? Is this like notifications you’ve received before from this company?
- Never tap on a link in an email or text message that you were not expecting. Instead, open your browser and enter the official URL for the website you wish to visit.
- To verify the legitimacy of a delivery notification, contact the company by phone, email, or their official mobile app. Do not use the phone number or link sent in the text to contact the company.