The scam by which cybercriminals impersonate courier and parcel companies via SMS has returned. Specifically, we are talking about the famous Correos customs payment scam, through which they can send you a message telling you that your package cannot be delivered so that you access a link that redirects you to a fraudulent page similar to the legitimate one in which you have to pay expenses or fees for the supposed shipment of a package.
What does it consist of and who does it affect?
The main affected are the self-employed, companies or employees , but it can harm anyone . It is even more believable when we are waiting for a package to arrive from the Post Office, we have made a purchase on the Internet or we are waiting for someone to send us something. But even if we do not expect any package, we can be victims of this scam that supplants the Post Office.
If you are waiting for a package and you receive an SMS on behalf of your parcel company telling you that they have not been able to deliver it to you because customs fees have not been paid , or any other expense that they indicate, and that you must enter a link to pay them, do not trust the message and do not open it . It is a scam and cybercriminals want to get your money.
The message may be this or similar: “Your package cannot be delivered, customs fees (€1.98) have not been collected. You can pay at this link” , with a link after the message for you to press and make the supposed payment to that the package arrives. In no case open a link that comes to you by SMS or email. Even if it is from a well-known company or a trusted person. When in doubt, ask through official means.
Do not do anything, if you have a pending shipment, it will arrive. If you want to be even more sure and want to know the status of your shipments, you can go to the official Correos website by typing www.correos.es in your browser and track your shipment in the Receive section, in Locate your shipment, indicating its reference number. If you don’t expect anything or don’t have it, you don’t need to do this check.
This is in addition to other cyber email scams related to the Post Office or parcel company, such as those in which they tell you that your order is ready, but you will have to pay the shipping costs so that the delivery is scheduled that same day, with a sender different from Correos (although they try to simulate it) and a link that if you press you will fall for their deception. To put more pressure on you, they indicate that if you do not pay they will return it to the sender without reimbursement for handling and shipping costs.
What if you have accessed this link?
If you have fallen for the deception or know someone who has, the important thing is that you act as soon as possible:
- Delete and block the SMS
- Contact your bank to tell them about your situation and cancel possible transactions that may be carried out
- If necessary, cancel or block your card
- If you have given certain personal data, make sure that you are not being impersonated or you are the victim of another fraud , although this can be more complicated to verify
- Complaint to the Police
- Do not reply to the SMS in any case