New text message phishing scam targeting US users

Jan 25, 2020 06:35 GMT  ·  By

Security experts warn of a new text message phishing scam that attempts to direct users to a malicious website where they’re prompted to provide their personal information.

The text message, which claims to be sent by FedEx, includes a fake tracking code for a package whose delivery settings haven’t been configured.

“Hello [random name], your FEDEX package with tracking code [random tracking code] is waiting for you to set delivery preferences [malicious link],” the text message reads.

Very often, the name that is being used for the text message doesn’t match the one of the receiver, and this is the first indication it’s a scam.

Clicking the malicious link included in the message points users to a page where they are asked to provide personal details and pay for various services.

Don’t click the link

FedEx warns customers shouldn’t open the websites and report the scam to the company.

“We are committed to protecting the security and integrity of our network. While there is no foolproof method to prevent the FedEx name from being used in a scam, we are constantly monitoring for such activity and work cooperatively with law enforcement,” FedEx explained in a statement.

“FedEx does not send unsolicited text messages or emails to customers requesting money or package or personal information. Any suspicious text messages or emails should be deleted without being opened, and reported to [email protected].”

Furthermore, the police are also emphasizing that users shouldn’t click the link in the message.

“There is a new scam where you get a text with your name from Fedex (or another delivery service)and a tracking number. Do not click on the link. When in doubt about a tracking number go to the main website of the shipping company and search the tracking number yourself,” Duxbury Police warns in a tweet.

Some users claim they received similar text messages claiming to come from other companies, including Uber and Amazon.