This week we’ve discovered two new parcel shipping scams currently making the rounds: the oddly familiar-sounding “BHL”, as well as fake United States Postal Service alerts. Read on to find out more.
BHL Shipping Scam
So it seems there’s a great new parcel service on the scene, BHL! Unfortunately, it’s yet another cheap scam and the reason it might sound familiar is that the scammers have borrowed the DHL company brand — even going so far as to mimic its colors, logo, and web design.
Netizens have reported receiving phishing emails which claim a parcel-related alert message is waiting for you on their website. If you follow the phishing link, you will be taken to a fake webpage at which point you’ll be required to enter personal information to get your parcel. Below is an example (URL: xanthinetruck[.]com):
The scammers are banking on would-be victims being foolish enough to fall for a ploy as simple as replacing a “D” with a “B”. Prove them wrong!
USPS Shipping Scam
Netizens have also reported receiving phishing emails from scammers posing as USPS. In the emails, it is claimed that a parcel has been blocked until further instructions are supplied by the would-be victim.
Following the links will take the victim to a phishing page where they are required to enter personal information. Don’t do it! This information can be used not only for data harvesting, but also for monetary theft and even identity theft. Lastly, watch out for these malicious URLs currently being utilized:
- uspsxc[.]com
- usa[.]spsusa[.]top
How to Protect Yourself
- Double-check the sender’s email address. Beware of typos and strange URLs.
- Reach out directly to official websites if you think there are issues with your package.
- NEVER use links or buttons from unknown sources! Use Trend Micro ScamCheck to detect scams with ease: ScamCheck is an all-in-one browser extension and mobile app for detecting scams, phishing attacks, malware, and dangerous links — and it’s FREE!
After you’ve pinned ScamCheck, it will block dangerous sites automatically! It’s available on Safari, Google Chrome, and Microsoft Edge.
You can also download the ScamCheck mobile app for 24/7 automatic scam and spam detection and filtering. (Available for Android and iOS).
Check out this page for more information on ScamCheck. And as ever, if you’ve found this article an interesting and/or helpful read, please do SHARE it with friends and family to help keep the online community secure and protected.