Shipping Scams of the Week: BHL and USPS

    Shipping Scams of the Week: BHL and USPS

    This week we’ve discovered two new parcel shipping scams currently making the rounds: the oddly familiar-sounding “BHL”, as well as fake United States Postal Service alerts. Read on to find out more.

    BHL Shipping Scam

    So it seems there’s a great new parcel service on the scene, BHL! Unfortunately, it’s yet another cheap scam and the reason it might sound familiar is that the scammers have borrowed the DHL company brand — even going so far as to mimic its colors, logo, and web design.

    Scam Alert_BHL_20220616_2
    Sample phishing email. Source: Reddit

    Netizens have reported receiving phishing emails which claim a parcel-related alert message is waiting for you on their website. If you follow the phishing link, you will be taken to a fake webpage at which point you’ll be required to enter personal information to get your parcel. Below is an example (URL: xanthinetruck[.]com):

    Scam Alert_BHL_20220616
    Sample webpage. Source: Reddit

    The scammers are banking on would-be victims being foolish enough to fall for a ploy as simple as replacing a “D” with a “B”. Prove them wrong!

    USPS Shipping Scam

    Netizens have also reported receiving phishing emails from scammers posing as USPS. In the emails, it is claimed that a parcel has been blocked until further instructions are supplied by the would-be victim.

    Scam Alert_USPS_20220616
    Sample phishing emails

    Following the links will take the victim to a phishing page where they are required to enter personal information. Don’t do it! This information can be used not only for data harvesting, but also for monetary theft and even identity theft. Lastly, watch out for these malicious URLs currently being utilized:

    • uspsxc[.]com
    • usa[.]spsusa[.]top

    How to Protect Yourself

    • Double-check the sender’s email address. Beware of typos and strange URLs.
    • Reach out directly to official websites if you think there are issues with your package.
    • NEVER use links or buttons from unknown sources! Use Trend Micro ScamCheck to detect scams with ease: ScamCheck is an all-in-one browser extension and mobile app for detecting scams, phishing attacks, malware, and dangerous links — and it’s FREE!

    After you’ve pinned ScamCheck, it will block dangerous sites automatically! It’s available on Safari, Google Chrome, and Microsoft Edge.

    TMC_CTA_Extension_2022

    You can also download the ScamCheck mobile app for 24/7 automatic scam and spam detection and filtering. (Available for Android and iOS).

    TMC_CTA_Mobile_2022

    Check out this page for more information on ScamCheck. And as ever, if you’ve found this article an interesting and/or helpful read, please do SHARE it with friends and family to help keep the online community secure and protected.

    Post a comment

    Your email address won't be shown publicly.

    0 Comments

      This website uses cookies for website functionality, traffic analytics, personalization, social media functionality and advertising. Our Cookie Notice provides more information and explains how to amend your cookie settings.