Fake SingPost delivery SMSes making rounds to steal confidential info
Posted by AngelaWong, 02-06-2020
Many people have turned to online shopping during this circuit breaker period as they dutifully stay at home.
In response, some scammers are taking this opportunity to prey on shoppers using sophisticated methods.
Recently, some people in Singapore have received fake SingPost delivery text messages to notify them about the delivery status of their purchase.
These links are likely to be phishing scams under the guise of a SingPost delivery tracking page.
According to one Facebook user, Thomas TangMushi, the message "looks so real" that you might fall for it if you were indeed waiting for deliveries to arrive.
Here's how it looks:

The link in the text message will direct you to a fake delivery tracking webpage that has the SingPost logo at the top.
The potential victim is then informed that the delivery has been put on hold due to outstanding payment.
The payment indicated on the page varies, but it is usually a small amount such as S$3, S$1.67, or S$2.95.

Here's another example of how the page might look like after you click into the link in the text message:

Then you will be directed to another page where you'll have to enter your name, address, phone number, and credit card details.


But eagle-eyed consumers will sense something is amiss from the website URL such as "collection.juststickitin.com" and "signup.yogasuma.care".
More information
source : https://mothership.sg/2020/05/fake-singpost-delivery-sms/#:~:text=These%20fake%20messages%20are%20phishing%20attempts%2C%20SingPost%20confirmed%20with%20Mothership.&text=According%20to%20SingPost%20spokesperson%2C%20Robin,to%20claim%20an%20undelivered%20parcel.