RAM Couriers delivery phishing emails. 

RAM Couriers phishing emails

RAM Couriers delivery phishing emails.

South Africa ranks 3rd highest in the world for Ransomware Attacks and Email Hacks.
If in doubt delete.

Hackers Scammers Sextortion Phishing

In this email phishing scam, you are prompted to pay for extra delivery costs for a parcel or login to Track and Trace your parcel. The phishing URL takes your to a cloned fraudulent website prompting you to pay for the delivery charges by entering your bank card details. The Track Your Parcel HTML button masks the phishing url. TRACK YOUR PARCEL <https ://ggle .io/5pb0>     

This scam is easy to spot as the email address of the senders is a non-Ram Couriers email address as well as no or incorrect Client ID. Secondly, I am not expecting a delivery nor would I use this email account to communicate with delivery companies. These emails are well crafted as the logos and HTML are correctly nestled, the grammar is good but the use of the Rand currency in one email is incorrect. Note common spelling mistake among = amount.

Please note the use of Logos as a trust factor and time-based threats to force you into a fear-based response.

We are aware of a fraudulent email masquerading RAM Hand-to-Hand Couriers, whereby the receiver of the email is instructed to pay an outstanding shipping cost, or their package will be returned.
Please note that a receiver of a RAM shipment will NEVER be required to make payment for outstanding shipping costs.
To protect yourself, you should look out for the following clues to determine if an email received is a potential scam:
-Whilst the email is branded RAM Hand-to-Hand Couriers, the email is not sent from a valid RAM email domain. A valid email from RAM to a receiver will always end with @ram.co.za.
-There are often distinct grammar or spelling errors.
-The use of generic greetings such as “Dear Customer” or “Dear Client”.
-Demands for urgent attention, as well as contradicting information.
-The request for login credentials and/or payment.

Please be assured that this matter has been handed to our fraud department.

​

RAM Couriers delivery phishing emails.

​Below are the same two emails, the left is HTML as you would normally receive your email via your email client however the email on the right is the same email converted to plain text, I receive all my emails as plain text, stripping out the masking HTML button, Note no Client ID. ##Email##.
Incorrect use of currency. Note spelling mistake among = amount.
The Track Your Parcel HTML button masks the phishing url. TRACK YOUR PARCEL <https ://ggle.io/5pb0>

© RAM Important Message. RAM Couriers delivery phishing emails.

​Below are the same two emails, the left is HTML as you would normally receive your email via your email client however the email on the right is the same email converted to plain text, I receive all my emails as plain text, stripping out the masking HTML button, Note no Client ID. Dear Customer.
Note spelling mistake among = amount.
The Track Your Parcel HTML button masks the phishing url. TRACK YOUR PARCEL <https: //shoutout. wix .com> 

Please note: RAM Couriers Delivery. 
RAM delivers in fully branded vehicles.
RAM staff are always dressed in RAM Uniforms with clear Identification Cards on a lanyard.
RAM Couriers do not outsource staff and deliveries.
Ram couriers conduct deliveries and collections utilising a Mobile Handheld Device.