A new Post Office delivery scam that asks customers to enter their bank details via a link sent by text has emerged.
Consumer champion Which? has said it is "one of the most convincing clone websites" they've seen.
In 2021 more than 2,000 reports of delivery scam texts were recorded to Which? via the scam sharer tool.
The new fake texts ask customers to book a redelivery slot using a website that is cloned from the actual Post Office website, meaning it looks extremely legitimate.
The first step of the scam asks customers to enter personal information such as postcode, name, date of birth and mobile number.
This information could easily be used to commit identity fraud.
It then asks for card details to pay a 'redelivery charge' of £1.10 and this information can be used to attempt to steal money from the account.
Adding to the legitimacy, the website confirms the redelivery request has been 'processed successfully and shows the new date.
A Post Office spokesperson said:
Scammers use our name, but Post Office never delivers letters and parcels. This is the job of Royal Mail.
Once we become aware of a fake Post Office website, we pass this information over to our digital enforcement partner. If there is a live website displaying our brand, we can submit a request for ‘takedown’ with the domain registrar that the URL is registered with.
In a lot of these cases, these websites are only live for a matter of days – mainly because once people start reporting a web URL to 7726, the site becomes untrustworthy. Web browsers will also start flagging whether a site could be a phishing site and start blocking attempts for people to access them.
This combination of reporting and network / device-based checks will intervene. These sites are then usually taken down fairly quickly. However, in our experience, once one site is taken down, another appears.
From our data we’re aware of over 1,000 domain names that we suspect or know have been set up to be used in delivery phishing scams in the last nine months alone.
What to do if you receive a similar scam text
The Post Office is asking people to forward any suspicious texts to Cyber Protext, run by the police.
Scam texts can be forwarded to 7726 to be investigated.
If you receive a suspicious text message like this, report it by forwarding the message to 7726 📱👮 @CyberProtectUK #CyberProtect pic.twitter.com/Reoonuh8dv
— Post Office (@PostOffice) January 13, 2022
What to do if you have been scammed
A survey carried out by Which? found that three in five people have been targeted by scam delivery texts.
If you think you have been scammed and given any personal bank details to scammers, contact your bank at the earliest opportunity.
Banks have until the end of the next business day to refund any unauthorised transactions unless they believe you authorised the payment or acted fraudulently.
Why are you making commenting on The Herald only available to subscribers?
It should have been a safe space for informed debate, somewhere for readers to discuss issues around the biggest stories of the day, but all too often the below the line comments on most websites have become bogged down by off-topic discussions and abuse.
heraldscotland.com is tackling this problem by allowing only subscribers to comment.
We are doing this to improve the experience for our loyal readers and we believe it will reduce the ability of trolls and troublemakers, who occasionally find their way onto our site, to abuse our journalists and readers. We also hope it will help the comments section fulfil its promise as a part of Scotland's conversation with itself.
We are lucky at The Herald. We are read by an informed, educated readership who can add their knowledge and insights to our stories.
That is invaluable.
We are making the subscriber-only change to support our valued readers, who tell us they don't want the site cluttered up with irrelevant comments, untruths and abuse.
In the past, the journalist’s job was to collect and distribute information to the audience. Technology means that readers can shape a discussion. We look forward to hearing from you on heraldscotland.com
Comments & Moderation
Readers’ comments: You are personally liable for the content of any comments you upload to this website, so please act responsibly. We do not pre-moderate or monitor readers’ comments appearing on our websites, but we do post-moderate in response to complaints we receive or otherwise when a potential problem comes to our attention. You can make a complaint by using the ‘report this post’ link . We may then apply our discretion under the user terms to amend or delete comments.
Post moderation is undertaken full-time 9am-6pm on weekdays, and on a part-time basis outwith those hours.
Read the rules here