This week’s article will introduce 5 SMS phishing scams in detail. Scammers design phishing pages, trying to steal your personal information with various excuses, including FedEx delivery, Illinois Department of Transportation (IDOT), Idaho unemployment insurance claim, Walmart, and Amazon. Did you see anything similar in your inbox? Check how these viral scams work and learn tips to avoid them:

FedEx Delivery

Are you expecting any packages? Please be careful of this FedEx delivery phishing scam! Scammers pose as FedEx and send fake delivery notifications, saying that you have to set up preferences for the package via a link.

Do not click on it! It is a phishing link leading to a fake FedEx page where you are asked to enter personal information. Scammers can then use it to hack into your other online services or steal your identity:

Content:
Hello Olivia, your FEDEX package with tracking code GB-6412-GH83 is waiting for you to set delivery preferences: e3fmr [.] info/

Illinois Department of Transportation (IDOT)

Last week we reported phishing text messages from the Illinois government, including fake Illinois unemployment insurance claim and fake Illinois office secretary of state. Recently a new version of fake text messages from the Illinois Department of Transportation (IDOT) has been circulating:

Content
Illinois Department of Transportation (IDOT) Driver Liscense Waiver Validation. Validate Your Details Below: <URL>

The link attached in the SMS message leads to a Microsoft form. Scammers will lure you into filling in your personal information like driver’s license numbers or other sensitive credentials through the form. The data will end up in scammers’ hands, and they can use it for identity theft!

Idaho Unemployment Insurance Claim

Following fake Illinois text messages, fake SMS notifications from the Idaho Department of Labor have appeared to exploit people. Scammers send text messages with phishing links, falsely claiming that there are issues with your “unemployment insurance claim account” and prompting you to reset your password via the link:

your Idaho unemployment insurance claim account is deactivated due to too many failed login attempts, please begun the account reactivation process by following the instruction in the link below and create a new password: <URL>

The phishing link will take you to a fake Idaho Department of Labor page, where you have to enter login credentials. Scammers can record the sensitive data you submit and use it for other scams such as identity theft:

It is also worth noticing that the domain of this fake Idaho government website goes to a fake Citizens Bank page, designed to steal people’s personal information. Anyways, be smart with your credentials. Please do not fall for these phishing scams!

Walmart Online Survey

We have seen Walmart online survey scams before, and this week we have observed 5 times more similar fake Walmart text messages again:

• Message from Walmart: Hey, you have received (1) item. Please schedule for delivery before its returned to sender. <URL>
• Notification from Walmart: Roy, you have received (1) parcel. Please schedule for collection before its returned to sender. <URL>
• Walmart sent you a notification – Damber singh, please claim your delivery in the next 5 hours. Open here <URL>

Scammers falsely claim that your package is on the way or that you need to schedule its delivery, trying to convince you to click on the phishing link in the text messages. If you do, you will be taken to a fake Walmart online survey page that says you can get an iPad Pro as a reward after completing the questionnaire:

After that, you have to provide your credit card number, expiration date, and even CVC code to deliver your gift. Does the story sound familiar? Yes, you are right. No gifts will ever appear. Instead, scammers will record the sensitive credentials you have submitted and can use them for identity theft or just steal your money for their own good!

Amazon Online Survey

Amazon has been scammers’ favorite brand to impersonate recently, and we have already written about Amazon online survey scams for many times. Unfortunately, these phishing text messages are still viral in different tactics, including fake maintenance notification, prizes or voucher, delivery, and Amazon Prime membership:

• Get Amazon voucher worth INR 1000 on opening an online Citibank Suvidha Salary Account. <URL>
• This is the 2nd one: Facilities Maintenance from Amazon. To view and apply click <URL> Txt STOP to Opt Out
• Delivered: Your Amazon package with Sushi Go Party! Card Game (ages 8+) (players 2-8) and 9 other items was delivered. More info at <URL>
• Add Your Rent, Netflix & Amazon Prime to your Credit Report to increase your Score! Start below, It’s Free!  <URL>
• Your Amazon Fresh order will be delivered soon. Details at: <URL>
• IMPORTANT: Amazon apologizes! Our gift to you is this Macbook Pro. Leave your details so we can ship it to you right away: <URL>

No matter which trick you fall into, once you click on the phishing link in the text message, it will lead you to a fake online survey page and ask you to finish it for gifts.

After that you will have to enter payment details and other personal information to “schedule for the gift,” such as your credit card number, expiration date, and CVC code. That said, scammers can steal your money and use all your sensitive data for identity theft!

How to Protect Yourself

• Double-check the sender’s mobile number.
• Reach out to the official website or customer support directly for help if you think there are issues with your account.
• NEVER click links or attachments from unknown sources. Use Trend Micro ScamCheck to detect scams with ease!

1. After you pin the ScamCheck browser extension, it will block dangerous sites for you automatically:

2. ScamCheck on WhatsApp:
Send a link or a screenshot of suspicious text messages to ScamCheck on WhatsApp for immediate scam detection:

Or download Trend Micro Maximum Security for a broader range of protection, including Web Threat Protection, Ransomware Protection, Anti-phishing and Anti-spam Protection, Privacy Scanner for Facebook and Twitter, Social Networking Protection, and Parental Controls. Click the button below to give it a try:

Did you successfully spot the scams? Remember, always CHECK before your next move.
If you found this article helpful, please SHARE to protect your family and friends!