Delivery text message scams have been on the rise this year, with many of us ordering more items online thanks to a certain pandemic. And with Christmas around the corner, the frequency of these scam messages has seemingly increased. I've been getting delivery scam texts on an almost daily basis. This makes perfect sense, because these scams are much more plausible if you've actually expecting deliveries.
In this guide, we'll look at what a delivery text message scam is, how to identify one, and what to do if you get one, all of which can help you have an identify-theft free Christmas.
What is a delivery text message scam?
A delivery text message scam is an SMS that purports to be in regards to something you've ordered. They'll typically be vague on details, will say that you've either missed a delivery or that there's an issue with your order, and there's always a link that will send you to a dodgy website or app.
If you visit one of these websites, there are a number of different vectors of attack cybercriminals use. Some will install malware on your phone, which can download personal information and message your contacts. Others will ask you to fill out a form with your personal information.
How do I tell if a text message is a scam?
The easiest way to tell if a text message is a scam is spelling and grammar. Every scam text I've gotten would make an English teacher cry. Some are less egregious, such as "hello, we @ were unable to deliver your package, please confirm for it to be redelivered". On the other hand, I've also received this one: "DHL: /_ihx_ Your#0f3# delivery failed". Real convincing guys.
The URLs included in these texts also tend to be unhinged. I've had messages that want me to click through to pets-om.ru and paktourism.com.pk. They don't exactly sound like legitimate delivery service providers.
Legit delivery text messages often have identifies that help you know they're the real deal. Sometimes they'll show up as coming from the likes of AusPost, DHL, FedEx, Couriers Please, or Shippit, instead of just from a random mobile phone number. This isn't always the case, however. If a delivery message just comes from a number, look for specifics instead.
Sometimes delivery text messages will say things like "your package from Apple is due for delivery today". If you're genuinely expecting something from Apple, there's a good chance it's legit. Scam messages rarely provide too many specifics to cast as wide a net as possible.
If you're not 100% sure if a message is dodgy or legit, you can always check your tracking number or contact the sender instead. For more info, check out this post on Verified.org.
What should you do if you get a delivery text message scam?
If you get a delivery text message scam, the most important thing to do is not to click the link. You should also block the number and delete the message. While these messages rarely come from the same number twice, it always helps.
On iPhone, you can do this by following these steps:
- Open the Messages app
- Go to the message in question and open it
- Tap the number at the top
- Tap Info
- Tap Block this Caller
On Android phones, you can block a number by following these steps:
- Open the Messages app
- Go to the message in question and open it
- Tap the three-dot icon in the top right-hand corner
- Tap details
- Tap Block and report spam and then press okay
These steps relate to the default Android messaging app, they may be slightly different on some phones.
If you've clicked the link and you're worried, (especially if you have provided personal information), it might not be a bad idea to change passwords on your critical apps and services, such as your email and banking. It's also good practice to have Two-Factor Authentication turned for these apps and services, if possible. You can also contact your bank if you're concerned.
If you think malware has been installed on your phone (which is much more of a risk on Android than iPhone), you may want to speak to an IT professional. If you've lost personal data to a scammer you can contact IDCARE, and you can also make a report to ReportCyber if you're a victim of cybercrime.
For more on spam and scam text messages, read our more general guide.
Alex Choros
Related Articles
