Your safety and the security of your money is our highest priority, and we implement stringent safeguarding measures to protect all our customers. However, it’s also important for you to take steps to shield yourself from fraud.
To assist you in identifying potential scams and staying secure, we are publishing a series of articles focused on fraud protection. This article specifically addresses delivery scams.
What is a delivery scam?
Delivery scams are a common form of phishing fraud in which criminals impersonate familiar courier and delivery companies to persuade people to hand over personal or financial information or make a small payment. These scams can arrive by text message, email or phone and usually claim there is a problem with an expected parcel.
A message might claim that a delivery has been held because of an incomplete address, an unpaid charge or a missed delivery. The recipient is then encouraged to follow a link to rearrange the delivery or pay a small fee before the parcel can be released.
These links often direct victims to fraudulent websites that have been designed to closely resemble genuine courier services. Once there, they may be asked to provide information such as their name, address and card details. In some cases, simply visiting a malicious website or downloading an attachment can also expose a device to harmful software.
Delivery scams can be particularly effective around Christmas and other busy shopping periods, when people are more likely to be expecting several parcels and may not immediately recognise which delivery a message refers to.
An example of delivery fraud
Hannah had recently placed a few online orders and was expecting a number of parcels to arrive over the following week. One afternoon, she received a text that appeared to come from a well-known courier company. It claimed that her parcel could not be delivered because some address information was missing and provided a link to arrange another delivery attempt.
The message appeared convincing. It used the courier company’s name, contained a tracking reference and explained that a small redelivery fee was required. As Hannah was expecting a parcel, she assumed the message was genuine and followed the link.
She was taken to a website that looked almost identical to the courier’s legitimate site. Hannah was asked to confirm her address and enter her card details to pay the small fee. After receiving a confirmation message, she assumed the problem had been resolved.
Later that evening, Hannah checked her bank account and spotted several transactions she did not recognise. She realised that her card information had been collected by the fake website. The original message had not been sent by the courier company at all but had been created by a fraudster.
Five tips on how to protect yourself
- Verify delivery messages independently
If you receive an unexpected message about a parcel, avoid following any links it contains. Instead, visit the retailer or courier’s official website or app directly and use the tracking information provided when you placed your order.
Don’t assume a message is genuine simply because it contains familiar branding or delivery information.
- Be suspicious of unexpected deliveries
Treat messages about deliveries you aren’t expecting with caution. Fraudsters send large numbers of scam messages in the hope that some recipients will happen to be waiting for a parcel at the time.
If you aren’t sure whether a notification relates to a genuine order, check your recent purchases and contact the retailer or courier through an official channel.
- Don’t provide unnecessary information
Fraudulent delivery websites are designed to collect personal and financial information from unsuspecting victims.
Be cautious if a supposed courier website asks for information that doesn’t appear necessary to arrange or track a delivery. Never provide more personal or financial information than is required.
- Question requests for small payments
A request for a seemingly insignificant payment can be used to make a delivery scam appear more believable. Fraudsters may claim that a small charge is needed for redelivery, postage or customs.
Rather than following a payment link in an unsolicited message, check the delivery directly through the courier’s official website or app.
- Don’t let yourself be rushed
Scammers often try to encourage immediate action by warning that your parcel will be returned or delayed if you don’t respond quickly.
Taking a moment to stop and check the message independently can help you identify a scam before you provide any information or make a payment.
If someone targets you
If you suspect you have been targeted by a delivery scam or have already interacted with one, act quickly. Stop engaging with the sender and don’t click any further links or provide additional information.
If you have entered your card or bank details, contact your bank or payment provider as soon as possible. They may be able to help protect your account and prevent further fraudulent transactions. You should also monitor your accounts carefully for any unusual activity.
You should also report the incident to Report Fraud, while suspicious websites should be reported to the National Cyber Security Centre (NCSC).
More information on delivery scams
The organisations and websites mentioned above provide useful information and guidance on recognising scams and protecting yourself online. If you think you have visited a suspicious website, tools such as who.is can also provide information that may help you assess a website’s legitimacy.
If you’ve been a victim of a delivery scam, organisations like Victim Support offer free specialist help and resources.
Finally, if you’re worried that your TorFX account may be at risk, contact us as soon as possible and we’ll be happy to help. You can also download our app, or use our online platform, to keep an eye on your transfers.