The Agency for Digital Italy portal has reported a new case of smishing, a type of scam that arrives via SMS. Users are told that a package has to be delivered again. For the entire operation only 0.27 euros are asked but the real cost of delivery can become much higher.
The message arrives on the phone. It is usually not a communication via WhatsApp but a SMS message. The Poste Italiane parcel scam begins with a text that looks like harmless: “We are unable to deliver the package due to the invalid address change the address for timely delivery.” Of course, these days a message like this could reach many, given all the packages that are traveling around streets ahead of Christmas. In jargon it is a type of scam called smishing: phishing via SMS.
The message also contains a link. It’s not immediately clear where it leads. Once you access the link, however, everything becomes much clearer. The reference page is in fact a fake Italian Post portal. The graphics are similar, although the reference URL is clearly the wrong one. It reads “businenpost-it”. On the screen it says “Delivery status” and “Notice of non-delivery”. This scam was reported by Computer Emergency Response Team of the Agency for Digital Italy (Agid).
And underneath a short text explaining that the package will be sent again on another date. Once you proceed with the delivery order, at this point the scam starts. The objective of this fake portal is in fact to steal user data. The form asks for name, surname, home address, telephone number and email. But it is in the last step that the most problematic part.
On Google, half of Italians search for information on symptoms and health
The data to watch out for: the payment request
The last step is the riskiest. In a final panel the user is asked to pay for the order again. Not everything. The only request is to make a payment from 0.27 euros to organize a new delivery. A paltry sum, the victims will think. A figure that could, however become much biggergiven that once you leave your credit card details the criminals behind this system can easily increase the amount to be paid.
AGID | The Italian Post Office parcel scam
What to do when you receive a suspicious text message
In case of suspicious text messagesthe procedure to follow is simple. The first thing to do is make sure of the recipient: double check the telephone number and URL of the site to which it refers. If you still have doubts you can always ask the sender for confirmation, in this case you can call the Poste Italiane toll-free number: 800.003.322. If you are certain that you have been hit by a scam, you can report everything to malware@cert-agid.gov.it.
