During the social distancing and quarantining that has become the hallmark of the Coronavirus pandemic, deliveries by UPS, Federal Express, Amazon and others became the primary way many of us are did all or almost all of our shopping.  With so many people having goods delivered, scammers, posing as delivery companies are taking advantage of this fact by sending out phishing emails and text messages in which they attempt to lure people into clicking on links or downloading attachments that will install dangerous malware on to the phones and computers of their victims.  Often these emails indicate that in order to receive a pending shipment, you must confirm information in an attached file.  In other instances, you are told that there was a labeling error and you need to confirm information by downloading and responding to an attachment.   In yet other instances, you are told there is a delay in the shipping of your package and instructed to click on a link or download an attachment for more information. Some of these emails may even contain a statement that the email was scanned for security purposes and found not to contain any malicious files or links, however, you can never rely on such a statement.  The following email is one presently circulating that appears to come from UPS and indicates that a package has not been delivered to you because of “lack of postage” which is a term never used by UPS.  If you click on the link where it indicates “Continue” you will either be lured into providing credit card information or download malware.  If you hover your mouse over the link (which I have disabled) you would have seen that the site to which it would take you has no relation to UPS.

Here is the email presently being circulated.  I have disabled the link and removed the name of the Scamicide reader who sent it to us.

 

Ref No. 7323876673910290933
UPS
UPS
Dear xxxxxxx
Your package is being held at our distribution center due to lack of postage. As soon as the postage has been paid, we will be able to deliver the package and you can collect it. To pay the shipping cost please go to the next page, this should be done as soon as possible as the package will be returned to sender if we do not receive your payment within 48 hours.
Continue
We thank you for your attention.
cordially
Customer Service – UPS

 

TIPS
If you receive an email  or text message from a company that asks you to click on a link or download an attachment, you should hesitate to do so, particularly if it appears bogus.  Never click on any link in an email or text message until you have confirmed that it is legitimate.  Also, although it is important to have security software on all of your electronic devices, you can’t totally rely on your security software to protect you from the latest forms of zero-day defect malware for which there has not yet been issued a security update.   If you have the slightest thought that an email or text message asking you to click on a link may be legitimate, rather than click on the link, go to the website of the company, which in this case of UPS is https://www.ups.com/us/en/Home.page or call them directly at 888-742-5877.  Also, if you wish to track a UPS delivery go directly to the website of UPS rather than click on any link in an email or text message that purports to take you to the UPS website.  Similarly, you can do the same for other delivery services.
It is also important to remember that UPS does not request payments, personal information, financial information, account numbers, IDs, or passwords through unsolicited emails, mail, text messages or phone.

For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.”  Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.

If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/