- Warden of The Web
- Posts
- Warden of the Web: December 2024, Edition 2 — Holiday Scams Alert
Warden of the Web: December 2024, Edition 2 — Holiday Scams Alert
Protect Your Festive Cheer from Digital Grinches
Ah, the holidays—hot cocoa, twinkling lights, the smell of cookies in the oven... and your doorstep transforming into a mini logistics hub. Every day feels like Christmas morning as you unbox deliveries, but wait.
"Ding! Hi, this is Tony from FedEx. I’m trying to find your house. Please call me."
Tony? Who’s Tony? You don’t remember ordering anything. Maybe it’s a surprise gift!
Then there’s another message:
"USPS: We couldn’t deliver your package due to an incomplete address. Click here to fix it."
You start to wonder if there is really an issue. Did you forget about this package during your online shopping spree? Should you click?
STOP RIGHT THERE.
Put down the phone, close the link, and take a deep breath. Scammers are working overtime to ruin your holiday vibes, but you’re smarter than that. This isn’t just any delivery drama—it’s a well-crafted con designed to swipe your personal info, steal your money, and maybe even install malware on your devices.
Let’s unwrap this scam step by step and make sure the only surprises this season are the ones under your tree.
Meet the Holiday Scammers
These scammers are crafty. They’re like carolers who show up, but instead of singing “Jingle Bells,” they’re after your personal data. They’ve mastered the art of looking legit with fake logos, professional-sounding texts, and even bogus tracking numbers.
The ‘Lost Delivery Driver’ Text
Scammers send a text claiming a delivery driver couldn’t find your address. They’ll provide a link to “reschedule your delivery,” making it seem like a simple and urgent matter. The catch? The link takes you to a phishing site designed to steal your personal and financial details. Sometimes, these sites even mimic well-known delivery services to look more convincing.
Example: "Hi, this is Jim - your UPS driver. We couldn’t deliver your package because we couldn’t find your address. Please reschedule your delivery here: [Fake Link]."
What to do:
Never click on unsolicited links, no matter how urgent the message sounds.
Contact the delivery company directly using their official website or app to confirm the status of your package.
Look for red flags like poor grammar, generic greetings, or suspicious URLs.
The ‘Incomplete Address’ Lie
This scam claims that your package couldn’t be delivered because of an incomplete address. The message asks you to confirm your details through a link. Once you enter your information, it’s harvested and sold or used for fraudulent purposes. Scammers rely on the holiday rush to pressure victims into acting quickly without thinking.
Example: "Your package couldn’t be delivered due to an incomplete address. Please confirm your details here: [Fake Link]."
What to do:
Verify the sender’s details by checking the email address or phone number against the company’s official contact information.
If you’ve placed an order, check your order history or contact the retailer directly to confirm any issues with delivery.
Never provide sensitive information like your credit card details or personal address through unsolicited links.
The ‘Small Fee’ Trick
You receive a text or email claiming a small fee is needed to release your package from customs or for redelivery. It sounds innocent enough, but the moment you enter your payment information, the scammers gain access to your financial accounts. Sometimes, they also install malware to track your activity and steal more data.
Example: "Your package is being held at customs. Please pay $1.99 to release it: [Fake Link]."
What to do:
Be extremely cautious of any request for payment via email or text, especially if it comes with a sense of urgency.
Legitimate delivery services will rarely ask for additional fees through unofficial channels.
Report suspicious messages to your delivery service provider or local authorities immediately.
How to Stay Safe This Holiday Season
Verify Before You Trust: Always double-check any unsolicited message with the company it claims to be from. Look up the company’s official contact information independently.
Avoid Clicking Links: If in doubt, navigate to the company’s website directly or use their app rather than clicking on links in messages. Scammers often use URLs that look similar but have subtle differences.
Secure Your Accounts: Use two-factor authentication (2FA) and strong passwords for your online accounts. This adds an extra layer of protection in case your details are compromised.
Keep an Eye on Bank Statements: Regularly monitor your accounts for unauthorized transactions. Early detection can minimize financial damage.
Educate Yourself: Learn to recognize phishing attempts and common scam tactics. Awareness is your first line of defense.
Help your friends and family stay scam-free by sharing this email. Together, we can outsmart these modern-day Grinches! The more people know about these schemes, the harder it will be for scammers to succeed.
Stay safe, stay informed, and enjoy the holidays!
Warden Out