Scam of the Week: Last-Minute Holiday Shipping Scams

The holiday season is a time for love, joy, togetherness—and last-minute online orders! We’ve all been there: anxiously awaiting a package and hoping you didn’t forget anyone on your shopping list. The holidays have a way of creeping up on us, so expect scammers to be creeping into your inbox as well.

Fake shipping notifications are especially popular during the holiday season. These can come in the form of an email (Phishing) or a text message (Smishing). Typically, the message will offer an urgent update about your package, such as a shipping delay, and you will be directed to click a link for more information. If you click the included link, you’ll be taken to a malicious website that asks for login credentials or other sensitive information. Any information entered on this page will be a gift from you to the cybercriminals!

Here are some tips to keep you safe from shipping notification scams:

• This attack exploits the stress and excitement of the holiday season. Don’t let the bad guys play with your emotions. Think before you click!
• Legitimate shipping notifications will include specific order information, such as your shipping address, an item description, or the name of the sender.
• Stay up-to-date on your orders by visiting the retailer’s official website. If you receive an unexpected notification, be sure to visit their website using your browser—not by clicking the link in the email.

Stop, Look, and Think. Don’t be fooled.
The KnowBe4 Security Team
KnowBe4.com