CTSI has been made aware of a new delivery scam in which members of the public receive a text informing them that a parcel has been returned to a Post Office depot.
The text contains a link to a fake website created to look exactly like an official Post Office platform. The website asks the target to enter their postcode and personal details, supposedly to identify their closest depot and reorganise the delivery. The information requested includes the recipient’s full name, address, date of birth and phone number.
The information provided is sent directly to scammers who are likely to use the information to commit identity fraud.
CTSI understands that someone who put their details into the bogus Post Office website lost £80,000 after fraudsters were able to pass their bank’s security checks by using the personal information the victim provided on the phoney Post Office website form.
The scam messages are the latest in a series of related delivery scams which use Royal Mail, DPD, Hermes and other delivery company branding. CTSI is raising awareness of this scam during Scams Awareness Fortnight, an annual public information campaign led by Citizens Advice.
CTSI Lead Officer, Katherine Hart, said: “This Post Office scam is far more insidious than a similar scam which involved Royal Mail. While the Royal Mail scam explicitly asks for a payment to reorganise a delivery, at no point does this happen in this Post Office version, making the communication less suspect and potentially more likely to be successful. Scammers could use the information to gain access to bank accounts and other important personal accounts.
“With the pandemic leading to a significant rise in online shopping and deliveries, it is vital that the message about the potential dangers of these scams are shared as far and as wide as possible, especially during this Scams Awareness Fortnight.”