Watch out - this fake delivery website scam could really ruin your Christmas

Ein Bote übergibt jemanden ein Paket
(Image credit: (stock.adobe.com © wutzkoh))

Cybersecurity firm Group-IB has revealed an unsurprising spike in the number of shopping-related scams in the run up to Christmas, but armed with the right information, we can improve our efficiency in spotting scams.

Researchers from the company’s Computer Emergency Response Team (CERT-GIB) observed 1,539 phishing websites impersonating postal operators and delivery companies.

CERT-GIB identified 587 fake postal resources in the first 10 days of December, marking a 34% rise compared with the same period last year.

Christmas shopping scams are on the up

Scammers are capitalizing on the Christmas-related chaos by instilling a sense of urgency into their victims with tactics like ‘failed’ delivery notifications.

Various European countries, including Germany, Poland, Spain, and the UK, are being heavily targeted, along with other regions globally, such as Mexico, Turkey, and Singapore.

A variety of campaigns, which Group-IB suspects could be interlinked, impersonate genuine delivery companies operating in each country to add a degree of authenticity.

The report summarizes: “Verifying the authenticity of delivery notifications, refraining from clicking on suspicious links, and cross-checking information with trusted sources are essential steps to safeguard against fake delivery scams.”

The phishing attacks are primarily being used to steal victims’ payment information, highlighting the need to exercise extreme caution and vigilance when sharing card details, especially for failed deliveries, which do not normally require payment for redelivery.

Camill Cebulla, Sales Director for Europe at Group-IB, commented: “The high volume of packages being shipped during the holiday season makes it easier for scammers to hide among legitimate delivery services.”

In fact, the company says that the mere awareness of such scams can sometimes be enough to prevent unsuspecting victims from providing too much information.

More from TechRadar Pro

Craig Hale

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!

Read more
Concept art representing cybersecurity principles
Cybercriminals cashing in on holiday sales rush
A light pink gift box with blush pink bow, red hearts and confetti on a pastel pink background.
How to spot Valentine’s Day scams - stay safe on this most special day with our security tips
A man looking at a tablet with a brown Best Buy package on the desk in front of him
Huge Christmas data breach - 14 million shipping records leaked, putting shoppers at risk
A man falling into a mobile phone screen.
Safer Internet Day: how to avoid online scams and stay safe online
Paper craft illustration of a suspicious email that contains a snake
How to spot a phishing email
A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system
Everything you need to know about phishing
Latest in Security
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Veeam urges users to patch security issues which could allow backup hacks
UK Prime Minister Sir Kier Starmer
The UK releases timeline for migration to post-quantum cryptography
Representational image depecting cybersecurity protection
Cisco smart licensing system sees critical security flaws exploited
Latest in News
Ray-Ban Meta Smart Glasses
Samsung's rumored smart specs may be launching before the end of 2025
Apple iPhone 16 Review
The latest iPhone 18 leak hints at a major chipset upgrade for all four models
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 24 (game #1155)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Monday, March 24 (game #386)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Monday, March 24 (game #652)
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 23 (game #1154)