SHIPPING TEXT SCAMS – Taking Advantage of Online Shopping

With Black Friday and Cyber Monday shopping in full swing, delivery companies such as UPS, Fedex, Amazon, and the U.S. Postal Service (USPS) are also in full swing delivering packages. As we try to protect our packages from Porch Pirates, scammers also try to take advantage of the intense season with shipping text scams.

As with all scams, shipping scammers “pretend” to be from a major delivery company with a text or email that is formatted like the real company’s text/email. The text/email will have a link that the scammer wants you to click on which will take you to a fake website or download malware that can harvest your personal information on your hard drive.

The scam presents a “problem” that you have to solve.  The scam may claim that they are having trouble delivering your package. One variation is where scammers place a fake “missed delivery” tag on your door claiming that they are having trouble delivering a package and to please call a number to reschedule delivery. Another variation is a text from the USPS saying the package is at the warehouse but has incomplete address information. You are asked to click on a link to verify your address.

Scammers place pressure on you to act now before you can think about the situation. In this case, there may be no need for a scammer to remind you to act now before Christmas comes. Some scam texts, however, will tell you that if you do not respond right away, they will return the package to the sender

Finally, you pay. You most likely will pay with the personal information that you provide the scammer as you “login” to a fake website or fill out an online form with your id and password, banking information, etc. Some scam texts/emails might also ask for payment. That should be a clear warning sign that the message is a scam.

What to do with a shipping message,

·         If you receive an unexpected text message or email about a package delivery, contact the company by phone or a website that you have verified as the true phone number or web address.

·         DO NOT click on any links provided by a text message or email.

·         If you think you recognize the message as concerning an order that you have made, go to the web site where you purchased the item and look up shipping and delivery status there.

 

 

Federal Trade Commission:

https://consumer.ftc.gov/consumer-alerts/2023/12/fake-shipping-notification-emails-and-text-messages-what-you-need-know-holiday-season

 

Better Business Bureau:

https://www.bbb.org/article/scams/16460-scam-alert-fake-text-delivery-scam

 

United States Postal Inspection Service:

https://www.uspis.gov/news/scam-article/smishing-package-tracking-text-scams

 

Aura.com:

https://www.aura.com/learn/ups-text-scam

 

 

 

RETAIL GIFT CARD FRAUD- Draining the Spirit of Christmas

With the holidays rapidly approaching, giving gift cards to family or friends has become a handy way of giving gifts for the Christmas holidays or any other time of year. Over the years however, retail thieves have found ways to steal the funds that you put onto the gift cards. The thieves in essence have found ways quickly “drain” the funds that you have placed on the gift card then use the money for their own purposes.

Draining is different from other criminal uses of gifts cards that you may have heard about. That is when scammers force a victim to pay the scammer for supposed fees, fines, bail, or simple extortion, sometimes draining the victim’s bank accounts to nothing. Cybersecurity educators have over the last few years been teaching that gift cards are for gift giving, and not for paying government, utilities, or anyone else for supposed late fees or fines. If someone, out of the blue, wants to be paid in gift cards, that is a signal to hang up.

Retail gift card fraud has turned into an International Organized Retail crime enterprise conducted by large, well-organized gangs who collect the cards and the account information on them. In some cases, teams of gang members steal blank gift cards from retailers, hand them over to other gang members who extract the account information and PINs then carefully return the card into its original packaging. They may send the account information to a central gang authority. Then the original “runners” who stole the cards, return the cards to the original retail store’s racks. In the meantime, other gang teams monitor the account balances of the stolen gift cards using sophisticated software. As soon as the software detects a balance over $0, the team drains the gift card of any funds placed on it. They may put the funds in a virtual wallet. In some cases, gangs purchase popular retail items, then sell those items to further launder the originally stolen funds.

Major retailers have built security into some gift cards and gift card packaging in an attempt to get ahead of the fraudsters. However, as with many security measures, gift card secure packaging will not be perfect. It still is up to us to take steps as best that we can to protect ourselves from gift card draining. As one Homeland Security Investigations agent put it in a recent webinar, consumers should treat gift cards like they treat produce or meat. You can,

·         When purchasing gift cards in a store, inspect the card packaging closely for tampering. Does the masking for the card number look like it has been scratched off? Does the packaging look like it has been tampered with? Don’t be afraid to be picky. Being picky might save you from an embarrassing call from the recipient of your gift card.

·         Keep the receipt. This can be your proof you made the purchase if there are problems with the card.

·         Purchase the gift card directly from the desired vendor. Cards from the vendor are less likely to have been tampered with by an unauthorized person. When ordering online from the vendor, be sure that you make your order from the vendor’s legitimate website. If you want an Apple gift card, order it from Apple.

·         DO NOT order gift cards from 3^rd party vendors or from gift card “auctions” when ordering online. Some websites claim to sell other people’s gift cards. There is no marketplace for secondhand gift cards!

·         On giving the gift card, encourage the recipient to use it as soon as possible or redeem the funds by putting them in a virtual wallet. That way the card is blank, and your friend or family member has the funds.

If you do receive a blank card, call the customer support number on the back of the card. This is the financial institution who is backing the card for the retailer or the brand name on the card and should be able to help you.

 

 

 

 

National Cybersecurity Alliance:

Season of Light, Season of Scams: Avoiding Gift Card Fraud- a webinar with an interview of a Homeland Security Investigations agent

https://staysafeonline.org/programs/events/season-of-light-season-of-scams-avoiding-gift-card-fraud/?utm_content=314808656&utm_medium=social&utm_source=twitter&hss_channel=tw-71354375&s=09

 

ProPublica:

https://www.propublica.org/article/chinese-organized-crime-gift-cards-american-retail

 

Federal Trade Commission:

https://consumer.ftc.gov/consumer-alerts/2019/12/tips-holiday-gift-card-shopping

 

TSA PRECHECK SCAM- Impersonating TSA to Take Your Money

Scammers will impersonate just about anyone to steal your money or take your personal ID. Some scammers have found the Transportation Security Agency (TSA) and its PreCheck program. TSA PreCheck is intended to let ticketed airline passengers pass through TSA checkpoints faster and easier while maintaining the security of airline flights.

To enroll in TSA PreCheck all you have to do is to Apply Online for the program, then visit a local enrollment location to give your fingerprints, documentation, have your picture taken, and pay for enrollment. When get your TSA PreCheck/Known Traveller Number, then add it to your airline reservations. With that you can go through security using the TSA Precheck Line. For more information about TSA PreCheck go to https://www.tsa.gov/precheck.

Scammers have tried to insert themselves by sending an email impersonating the TSA to PreCheck travellers reminding them to renew their subscription. TSA PreCheck is only good for a few years and needs to be renewed from time to time. And from here you probably can guess the drill. The email has you click a link that it provides. The link takes you to a bogus website that looks like the real TSA PreCheck web site. You are given the “opportunity” to pay online, and the scammer has your money, your personal information, and your credit card account number. You will not find that your membership renewal is no good until you arrive at the airport for your next flight.

Please note, if you are applying for PreCheck for the first time, you cannot pay online, you pay in person at an Enrollment Center. If you are renewing PreCheck you can renew and pay in person at an Enrollment Center or renew and pay online.

Remember, to avoid this scam,

·         DO NOT click on links in unexpected emails or text messages, no matter how real they look!

·         Don’t be rushed. If someone insists that you pay right away, it’s probably a scam.

·         To enroll, or to renew TSA PreCheck only go to https://www.tsa.gov/precheck. Any other URL is a fake website for TSA PreCheck.

If you spot this scam, or have been victimized by this scam, tell the Federal Trade Commission (FTC) at https://reportfraud.ftc.gov/.

 

 

 

Federal Trade Commission:

https://consumer.ftc.gov/consumer-alerts/2024/10/how-avoid-tsa-precheck-scams  

 

WWBT, Richmond, VA:

https://www.msn.com/en-us/travel/news/tsa-bbb-warn-about-precheck-scam-ahead-of-holiday-travel/ar-AA1tHRt7

 

WMUR, Manchester, NH:

https://www.wmur.com/article/tsa-precheck-scam-warning-holiday-travelers/62831136

 

Transportation Security Agency:

https://www.tsa.gov/precheck

https://www.tsa.gov/travel/frequently-asked-questions/i-think-i-may-have-fraudulently-renewed-tsa-precheckr-what-do-i

https://www.tsa.gov/travel/frequently-asked-questions/i-think-i-may-have-fraudulently-enrolled-tsa-precheckr-what-do-i

PACKAGE THEFT- Porch Pirates Steal Billions from Front Porches

Package thefts are a problem throughout the year with the holidays having a higher level of deliveries to homes. According to some estimates, 22 billion packages are delivered to homes each year. In the past year, $12 billion in merchandise has been stolen from front porches. In one survey, 59% of Americans are at least slightly to moderately concerned about package theft with 28% very or extremely concerned.

Securing delivered packages on your front porch can be a challenge especially since the packages often can be easily seen from the street. But you can take steps to reduce the chance of theft.

·         Reduce the time the package is on your front porch. This can be a challenge, especially if you have to be away from your home when the package is delivered. The less time a package is on your front porch, the less chance a package thief will have to steal it.

o   Take advantage of package tracking. Each delivery service, including the US Postal Service, offers package tracking so that you know where the package is in their delivery system. Many will send a message when your package is delivered. If you are at home, you can quickly bring it into your house. If you are not at home, ask a trusted neighbor to watch your porch, and secure any packages on it.

·         Have your packages delivered to a pickup location. Delivery companies have places where you can pick up your packages, such as the UPS Store, FEDEX Store, or Amazon Lockers. This way your package is secure until you pick it up. It does require an extra step, but you could pick it up on the way from work or when you are running errands.

·         Consider installing a package lockbox. A lockbox located on your front porch, secures your packages so that they are inaccessible to porch pirates. Be sure to bolt the box to the flooring of your porch so that thieves cannot make off with the box then open it at their leisure. Also, be sure that its design is easy for the delivery driver to use so that he/she will use it. When you place an order for delivery, be sure to give instructions to use the box and how to open it (including any codes that might have to be used). Lock boxes can range in cost from $100 to $400.

·         If you do not want to invest in a lockbox, instruct the driver to place the package in a more secure location around your house. This can be on the side of the house, where the package will not be visible, or even on your back porch.

·         Require a signature on delivery. The benefit is that when the driver collects your signature, he/she hands the package directly to you. This is best if you are going to be at home most of the day.

·         Install a video doorbell or other security camera at your front door. An essential element to prevent theft is to ensure the camera is visible to everyone, and, if you have a security system, a sign is prominently posted so that people arriving at your property know you have a security system. Most thieves on seeing cameras or seeing there is a security system on the property will go on to another target (87% according to one study). Notice I said “most” thieves. Obviously, there are plenty of security videos floating around social media showing porch pirates ignoring the fact that there are cameras in place. With a camera that records events, there is an opportunity to give an investigating deputy a recording of the theft.  

 

 

 

 

Security.org:

https://www.security.org/package-theft/annual-report/

 

CNET:

https://www.cnet.com/home/security/the-7-best-ways-to-keep-porch-pirate-hands-off-your-package/

https://www.cnet.com/home/security/this-ancient-home-hack-could-be-your-best-answer-for-porch-pirates/

 

Microsoft:

https://www.microsoft.com/en-us/microsoft-365-life-hacks/organization/package-theft-how-to-prevent-porch-pirates?msockid=1ccaa3490741631714d9b3fb03416160

 

Amazon:

https://www.aboutamazon.com/news/operations/amazon-porch-pirate-prevention-tips

 

FedEx:

https://www.fedex.com/en-us/customer-support/faqs/receiving/delivery/prevent-stolen-packages.html

https://www.fedex.com/en-us/delivery-manager/how-to-prevent-stolen-missing-packages.html

 

US Postal Inspection Service:

https://www.uspis.gov/tips-prevention/mail-theft