UK residents are targets of a recent smishing (SMS Phishing) scam. In this scam, cybercriminals impersonate the home delivery company, Evri through fake failed delivery text messages that include a link to reschedule the delivery.
The link included in these fake delivery notifications leads to a phony look-alike website. On the website, you’re asked to provide your personal and financial information to reschedule the delivery. Unfortunately, if you fill out and submit this form, you won’t be receiving any packages. Instead, you’ll be delivering your sensitive information right to the cybercriminals.
Follow these tips to protect yourself from similar smishing attacks:
- Think before you tap. Are you expecting a package? Have you signed up for text notifications? Is this like notifications you’ve received before from this company?
- Never tap on a link in an email or text message that you were not expecting. Instead, open your browser and enter the official URL for the website you wish to visit.
To verify the legitimacy of a delivery notification, contact the company by phone, email, or their official mobile app. Do not use the phone number or link sent in the text to contact the company.
Stop, Look, and Think. Don’t be fooled.
Protect your network! Learn more about security awareness training for your team.