First posted on 15/10/2019
What’s happened?
Australia Post is warning the community of widespread scam text messages telling customers there are problems delivering a package, or that a parcel won’t be delivered “due to unverified shipping address.”
The text messages use AusPost as the sender name (which means it appears in the same text thread as other legitimate AusPost communications) and asks you to click on a link.
The link leads to a fake website with the Australia Post logo, asking you to verify your address and provide a payment. By entering these details, the scammer can steal your personal and financial information.
Does it affect me?
These text messages have been sent to a large number of people.
The way mobile phones show SMS conversations means this scam message can look like a legitimate Australia Post text message. When scammers pretend to be legitimate or well-known brands to trick you into handing over your personal details, this is known as ‘phishing’.
How do I stay safe?
Remember that Australia Post will never:
Email or text message you asking you to click on a link to print out a receipt or label for parcel collection and tracking, or to access your package.
Ask you to send an email with your personal or financial information, including any form of ID, passwords, credit card details and account information.
If you are not sure whether an email, text message or phone call is legitimate, contact the organisation the message claims to be from. Do this by searching for contact details on their official website, social media page or other independent source and not from any contact details in the message.
If you believe you have sent any personal information to a scam email address or entered it into a scam website and are worried that your identity may have been stolen, you can contact IDCARE – Australia and New Zealand’s free national identity & cyber support service – on 1300 432 273.
More information
Stay Smart Online has advice on what phishing is and how to protect yourself from it. Think you can spot a scam (phishing) message? Take our quiz to put your skills to the test: https://www.staysmartonline.gov.au/reversethethreat/scammessages
The information provided here is of a general nature. Everyone's circumstances are different. If you require specific advice you should contact your local technical support provider.
Disclaimer
This information has been prepared by the ACSC. It was accurate and up to date at the time of publishing.
This information is general information only and is intended for use by private individuals and small to medium sized businesses. If you are concerned about a specific cyber security issue you should seek professional advice.
The Commonwealth and all other persons associated with this advisory accept no liability for any damage, loss or expense incurred as a result of the provision of this information, whether by way of negligence or otherwise.
