Australia Post warns of widespread scam text messages telling customers there are problems delivering a package, or that a parcel won’t be delivered “due to unverified shipping address.”
The text messages use AusPost as the sender name (which means it appears in the same text thread as other legitimate AusPost communications) and asks you to click on a link.
The link leads to a fake website with the Australia Post logo, asking you to verify your address and provide a payment. By entering these details, the scammer can steal your personal and financial information.
These text messages have been sent to a large number of people.
The way mobile phones show SMS conversations means this scam message can look like a legitimate Australia Post text message. When scammers pretend to be legitimate or well-known brands to trick you into handing over your personal details, this is known as ‘phishing’.
How do I stay safe?
Remember that Australia Post will never:
- Email or text message you asking you to click on a link to print out a receipt or label for parcel collection and tracking, or to access your package.
- Ask you to send an email with your personal or financial information, including any form of ID, passwords, credit card details or account information.
If you are not sure whether an email, text message or phone call is legitimate, contact the organisation the message claims to be from. Do this by searching for contact details on their official website, social media page or other independent source and not from any contact details in the message.
If you believe you have sent any personal information to a scam email address or entered it into a scam website and are worried that your identity may have been stolen, you can contact IDCARE – Australia and New Zealand’s free national identity and cyber support service – on 1300 432 273.