CORREOS SCAM: Spanish Authorities Warn Of Post Office Scam
Spain News
Published: 13 November 2023 14:52 CET
Updated: 17 November 2023 14:52 CET
Spain’s National Cybersecurity Institute (Incibe) has issued a warning, as detailed in a statement on its website, regarding a new fraudulent campaign targeting the Correos postal service.
In this campaign, a group of cybercriminals employs various tactics to obtain personal and banking information for nefarious purposes. Typically, these attackers utilise well-known techniques such as phishing, where they pose as a public institution or a reputable company to gain the trust of their targets. This allows them to execute their attack discreetly, ensuring swift acquisition of the required information.
The modus operandi begins with an email from Correos, stating that a package in the recipient's name awaits delivery. This intriguing subject prompts recipients to open the email to learn more about the alleged shipment. The cybercriminals' objective is to capture the recipient's attention and guide them through a series of instructions to claim the supposed package. They provide a specific tracking number and a shipping date to lend authenticity to their scheme, stating, for instance, "Your Correos package no. CR180077540ES, sent on 25/10/2023, is in process."
The Scam Unfolds
Subsequently, the perpetrators inform the recipient that payment is required to retrieve the package, claiming that it has undergone customs clearance, incurring additional costs: "According to current customs regulations, any import from a country outside the European Community with a commercial value of more than 22 euros is subject to taxes, regardless of the type of goods." The cybercriminals direct victims to make the payment through a platform called Paysafecard.
Should recipients wish to reclaim the alleged package, the scammers guide them to purchase a Paysafecard PIN code online, costing 50 euros. This entire amount becomes the loot for the scammers if victims comply with their instructions. After obtaining the code, the attackers request that it be sent to them, ostensibly to facilitate the shipment of the package back to its destination. However, this is merely a ploy to coax victims into spending 50 euros on the Paysafecard platform, which they then send to the scammers.
Identifying and Avoiding the Scam
The National Cybersecurity Institute offers guidance on identifying such scams. Pay attention to details such as the domain used by cybercriminals, which may differ slightly from the legitimate one. Additionally, scrutinise the language used, as the Institute notes, "Grammatical and formatting errors have been detected in these communications that betray the falsity of these notifications." Legitimate communications from Correos would not contain numerous spelling mistakes. If in doubt, it is advisable to contact the Post Office directly to verify the authenticity of the communication and clarify any uncertainties.
This article was brought to you by HealthPlan, experts in expat health insurance in Spain.
Source: Cadenaser
