Overview
The victim expects to get a product delivered that the scammer claims is delayed or is having difficulty being delivered.
How It Works
The scammer sends a message claiming that the victim's package is unable to be delivered for some reason.
The scam is that if the victim replies or clicks the provided link, the victim will either be sent to a phishing page where they risk downloading malware, or they may have their personal data or financial data stolen.
The scam is generally a "spray and pray", broadly disseminated attack. However, there is a regional aspect to this, as not every package delivery company exists in every country or region. So the scammer may impersonate a package delivery company in the victim's area.
Related Articles
Synthetic Examples
2.1.4 Sample Data 1 - count: 612. With fake URLs and random fake phone numbers
2.1.4 Sample Data 2 - count: 612. Same as Sample Data 1, but with redacted URLs and phone numbers
Related Scams
2.1.8 Points Expiring Scam: Brian Krebs linked the same groups carrying out the Points Expiring Scam to the ones formerly doing the Package Delivery Scam and the 5.1 Government Fee Collection Scam (toll scam) in the article SMS Phishers Pivot to Points, Taxes, Fake Retailers
5.1 Government Fee Collection Scam: See above.
Related Crime Schemes
A particular instance of this scam may embed one or more of these related schemes.
Data Loss: Any scheme that results in victim losing data/scammer stealing data. Data in this context can mean login credentials, credit card details, or other personal or corporate information.
Extortion: Extortion refers to any scheme that uses a threat of additional damage to extract payment from the victim.
Fraudulent Platform: Any scheme that relies on custom built software that assists the crime. Includes fraudulent trading platforms, fraudulent clickworking platforms, and the like.
Victim Targeting Context
The scammer may use one or more of the following techniques to reach the victim.
Spray and Pray / Scattered: The scammer approaches many victims at once such as through bulk email or SMS.
Semi-Targeted Regionally: The scammer approaches people in a certain region, for example by area code (toll scam) using semi-targeted email or SMS.
Social Engineering: Psychological Manipulations
The scammer may use one or more of these psychological techniques to accomplish the scam.
Threat: The scammer employs threats to increase fear in the victim so that they will go along with the scam. Threats can include financial loss, legal action, arrest, account closure, extortion, blackmail.
Urgency: The scammer employs urgency to increase the likelihood that the victim will take action.
Social Engineering: Impersonation Techniques
The scammer may impersonate one or more of the following groups as part of the scam.
Business: The scammer impersonates a business or nonprofit.