Is That Really SingPost? Phishing Scams Using Delivery Alerts

Is That Really SingPost? Phishing Scams Using Delivery Alerts – How to Recognise and Protect Yourself

In Singapore, doorstep delivery has become an integral part of everyday life. Whether it's online shopping, parcel sending, or receiving gifts from loved ones, we rely heavily on companies such as Singapore Post (SingPost). However, with this reliance comes a rising tide of cybercriminal activities: sophisticated phishing scams disguised as legitimate delivery alerts.

If you've ever received a message claiming that your parcel is awaiting collection, or that there’s an issue with your delivery, and it urges you to click a link or provide personal details, you might have encountered a scam. These scams can look convincing, exploiting the trust Singaporeans have in SingPost and the convenience of delivery notifications. But how do you tell if an alert is genuine or a malicious attempt to steal your personal information?

This comprehensive guide will explore how scammers operate using SingPost delivery alerts, how to spot fake messages, and most importantly, how to protect yourself from falling victim to these scams.

The Rise of Delivery-Related Phishing Scams in Singapore

The Convenience and the Risk

The boom in e-commerce has transformed Singapore into a shopping paradise. According to the Department of Statistics Singapore, online retail sales have increased significantly in recent years, boosting parcel deliveries. According to URA, “the proportion of online sales in retail has more than doubled since December 2018 to 14.3% in December 2021, according to the Singapore Department of Statistics. We are supporting the corresponding growth in e-commerce by improving last mile delivery, such as planning infrastructure as well as adopting new business models and technologies.”

While this is good for consumers and the economy, scammers have capitalised on this trend.

Cybercriminals send phishing messages mimicking SingPost’s official communication channels, promising parcel deliveries, customs clearance updates, or call for payment to release a parcel. These messages often contain links that redirect users to fake websites designed to steal personal data, login credentials, or infect devices with malware.

Common Tactics Used in Delivery Scam Messages

- Spoofed sender IDs: Scammers often spoof the sender’s email address or phone number to look like official SingPost contact details.

- Urgent language: Phrases like “Action required,” “Parcel awaiting pickup,” or “Payment needed” prompt quick reactions.

- Fake links: These often look legitimate but lead to fraudulent websites that mimic SingPost’s appearance.

- Malicious attachments: Some messages contain malware disguised as invoice or delivery notices.

- Requests for personal data: Scam messages often ask recipients to confirm personal details, banking information, or payment details.

How to Recognise a Fake SingPost Delivery Alert

Understanding the signs of a scam is crucial in avoiding falling prey to these malicious campaigns. Here are specific indicators to watch out for:

1. Check the Sender’s Details

- Official channels: SingPost typically communicates via SMS from a recognisable number or email with its official domain (e.g., @singpost.com).

- Suspicious contact info: Be wary of messages from unfamiliar or inconsistent numbers, email addresses, or sender IDs that don’t match SingPost’s official contact details.

2. Examine the Language and Content

- Grammatical errors: Scam messages often contain typos or awkward phrasing.

- Too good to be true: Offers of free shipping or discounts that seem suspicious.

- Urgency and threats: Phrases urging immediate action (“Your parcel will be returned in 24 hours”) are red flags.

3. Look at the Links and Attachments

- Hover over the link: Without clicking, hover your cursor to see the URL. Fake links often have misspelled versions of official domains or unusual strings.

- Check for HTTPS: While HTTPS alone doesn’t guarantee legitimacy, the absence of it is suspicious.

- Attachments: Never open attachments from unknown or untrusted sources, especially if they are unsolicited.

4. Cross-Verify with Official Sources

- Use SingPost’s official website or app: Instead of clicking links, log in directly to the SingPost website or app to check parcel status.

- Contact SingPost customer service: When in doubt, call SingPost’s official helpline or visit their official online portals for confirmation.

Real-Life Examples of SingPost Phishing Scams in Singapore

Example 1: Fake SMS Alert

A typical scam SMS might read:

> "Your parcel

123456789 is out for delivery. Confirm details here: [fake link]"

This message claims your parcel is out for delivery and urges you to click a link. If you hover over the link, it might lead to a look-alike website asking for your SingPost login credentials or personal info.

Example 2: Email Phishing Notice

An email might seem to come from SingPost, with the subject line:

> "Important: Delivery delay notice for your shipment"

The email contains a fake tracking link that, when clicked, installs malware or steals your login details.

Example 3: Voice Call Scam

Scammers also impersonate SingPost representatives calling to inform you about a failed delivery or customs issue, requesting payment over the phone. Remember, SingPost typically does not make unsolicited calls demanding payments.

Protecting Yourself from Delivery Alert Phishing Scams

Prevention is better than cure. Here are key steps to stay safe:

1. Be Sceptical of Unexpected Messages

- Always verify messages claiming urgent action is needed, especially if unsolicited.

- Confirm directly via the official SingPost website or app.

2. Avoid Clicking on Suspicious Links or Attachments

- Do not click on links in unsolicited messages.

- Do not open attachments unless you are certain of their legitimacy.

3. Use Official Communication Channels

- Bookmark the official SingPost website and mobile app.

- Use the SingPost app to track your parcels directly.

4. Keep Your Devices Security-Updated

- Regularly update your device's software.

- Install reliable antivirus and anti-malware solutions.

5. Educate and Inform Loved Ones

- Share information about common scam tactics.

- Warn family members, especially the elderly, who may be more vulnerable to such scams.

What To Do If You Suspect a Scam

If you receive a suspicious delivery alert:

- Do not click any links or provide personal information.

- Report the scam to SingPost through their official website or customer service hotline.

- File a report with the Singapore Police via the online scam reporting portal (https://eservices1.police.gov.sg/phub/eservices/landingpage/police-report)

 

- Inform your bank immediately if you have inadvertently shared banking details.

How SingPost Is Combating Delivery Scam Fraud

SingPost continually works to enhance its communication systems:

- Official notifications now include verified branding and secure links.

- Public awareness campaigns educate consumers about scams.

- Collaboration with authorities ensures swift action against scammers.

- Enhanced digital security measures help detect and prevent impersonation attempts.

Final Thoughts: Stay Alert, Stay Safe

Phishing scams using delivery alerts are a growing concern in Singapore, exploiting the trust in SingPost and the convenience of parcel delivery. By remaining vigilant, scrutinising all messages, and verifying through official channels, Singaporeans can significantly reduce their risk of falling victim to such scams.

Remember, no legitimate delivery notification from SingPost will ask you to provide sensitive information or click on suspicious links. If in doubt, always contact SingPost directly or visit their official website to confirm your parcel status.

Your vigilance is your best defence. Stay alert, stay safe.

Additional Resources

- SingPost Official Website

 

– https://www.singpost.com/contact-us/service-enquiry#

 

 – https://www.police.gov.sg/Advisories/Crime/Scams

About Scam.SG

Scam.SG is Singapore’s leading platform dedicated to raising awareness about online scams and cybercrimes. We provide timely alerts, safety tips, and guides to help you navigate the digital world safely. Stay informed, and help us create a safer Singapore for everyone.

Stay Updated & Protect Yourself – Subscribe to Scam.SG!

Sign up for alerts and tips on the latest scams affecting Singapore residents. Together, we can beat scam artists at their own game.

Disclaimer: This article is for informational purposes only and does not constitute legal or security advice. Always consult official sources and cybersecurity professionals for comprehensive protection.

*Stay safe, Singapore!*