South Africa Post Office .cfd SMS parcel delivery scam​.

South Africa Post Office .cfd SMS parcel delivery scam​.

SMS confirm/adjust your delivery address which directs you to a cloned South African Post Office website fake payment page.

Post Office SMS scam

Text message +27 (76) 223 7045
SMS confirm/adjust your delivery address which directs you to a cloned South African Post Office website fake payment page.

Please adjust the delivery
address of your parcel order
within one day, otherwise the
parcel will be returned to the
source: https://postoffce.cfd 

Post Office SMS scam.

Text message +27 (76) 223 7045
SMS confirm/adjust your delivery address which directs you to a cloned South African Post Office website fake payment page.

This SMS scam was easy to spot as its spray-mail type scam, firstly I am not expecting a parcel, South Post Office is non-functional these days and most important is the URL should be
.co.za not .cfd.

This SMS scam makes use of time-based threats to force you into an emotional fear-based reactions even though some victims were not expecting a parcel they still fell for this scam

Note the spelling mistake in the URL post offce and use of .cfd is a red flag moreover it’s a scammer technique called Typosquatting.  

Typosquatting is a type of social engineering attack which targets internet users, it involves tricking users into visiting malicious websites with URLs that are common misspellings of legitimate websites.

South Africa Post Office .cfd SMS parcel delivery scam​

SMS confirm/adjust your delivery address which directs you to a cloned South African Post Office website fake payment page.

Website blocked due to suspicious top level domain (TLD) using Malwarebytes Browser Guard however Privacy Badger, Avast Online Security & Privacy, Google Chrome, Zone Alarm Web Secure, Safe Browsing and Anti-phishing modules did not pick up the cloned fake Post Office website. The website generates a 500 code or a blank webpage when certain parameters are triggered like web scanners rendering an empty webpage with no data while using on-line scanners like URvoid and Who Is services.

Google Chrome: This page isn’t working postoffce.cfd is currently unable to handle this request. HTTP ERROR 500.

Google Safe Browsing site status Current status check_circle No unsafe content found

The cloned fake South Africa Post Office typosquatting website, was only registered 14/09/20223 and with all these Red Flags the scammers have been able to avoid detection using these avoidance methods.

You receive an SMS
Please adjust the delivery address of your parcel order within one day, otherwise the parcel will be returned to the source: https://postoffce.cfd .

You follow the link to what appears to be a South Africa Post Office website with payment gateway where you enter all the details scammers need:
Name, email, address with zip code and telephone number. You will be asked to enter card number, expiry date and the CVV number to release the package,
all the information required to max your credit limit.

You are enticed with the small amount, in this case R45,70, however the scammers then immediately empty your bank account, this action cannot be reversed and you may not be able to claim if you used a code or one-time pin (OTP).

Mark the SMS as spam immediately.
All browser to “always ask” before allowing anything to be downloaded.
Do not click on links you do not know.
Change your passwords often and don’t re-use the same password.

This is how you can spot a message or email that is not from the Post Office:

• The Post Office never asks for import duties or clearance fees in advance.  If there are customs fees payable on a parcel from abroad, the client pays the fees when they collect the parcel from the Post Office counter or when delivered by a Post Office driver.
• The Post Office never requests your bank account number or an online payment for customs duties.
• The tracking number on the message is invalid when entered into the postal tracking website, or refers to a parcel that was collected years ago.
• The website you land on after clicking is NOT the SA Post Office’s secure website.
•  

The Post Office sends customers an SMS or a collection slip when they have a parcel waiting for collection at a post office branch.  This parcel should be collected as soon as possible to make sure it is not returned to the sender. Post Office branches have separate queues for different transactions, so if you collect a parcel you will go into a shorter, faster queue. An identity document is required to make sure the rightful owner collects the parcel.
If you have any information about postal crimes, please contact the Post Office’s toll-free crime buster hotline on 0800 020 070.