Shoppers seeking updates on their online purchases are receiving fake shipping notifications — something that is heightened during the busy shipping season during the holidays.
The endless texts and phishing emails alert shoppers to a delivery issue requiring immediate attention.
Scripps News Baltimore Reporter Mallory Sofastaii spoke with multiple customers at the post office, who told her they have received these scam texts.
Scammers just need one person to fall for it.
“They’re desperately hoping that you will act so quickly that you will give them whatever they want so that they can steal money from you,” said Karen Morgan, executive council member and lead fraud volunteer with AARP Maryland.
RELATED STORY | This phishing scam uses text messages pretending to be USPS with a delivery
AARP is warning shoppers about these scam texts seeking personal information such as date of birth, Social Security Number, or account logins. And they received a report of someone paying a $0.99 re-delivery fee and later realizing they'd been charged $400.
“Do not act quickly on any of these notifications. Stop a minute to recall, did you actually order something? Have you actually sent something? And by the way, if it's the post office, FedEx or UPS, don't they already have your address? Why do they need you to give it to them again?” Morgan suggested.
USPS will never send a text or email without the customer first requesting tracking information and they do not charge for these services.
“I have registered with the post office to receive emails,” said online shopper Ana Cruz, who uses USPS Informed Delivery, a free service to keep track of mail and packages that are scheduled to be delivered.
Howard Shand said he doesn’t do a lot of online shopping. “I go direct to a store, so I don't really have that problem. You know, I shop early,” he added. And he said he's extra vigilant for a reason.
“I've been scammed before, so, you know, it makes you more alert,” Shand said. “Just be careful. Pay attention and don't let down your guard easily.”
It's important not to click on any links in these messages. Even if you don't enter your information, malware could be downloaded onto your device. And some of the links will take you to a fake login page designed to steal your password and then lock you out of your real account or to hack into other financial accounts.
Click here to see the other 12 Scams of Christmas.
This story was originally published by Mallory Sofastaii at Scripps News Baltimore.
