15 October 2019

What’s happened?
Australia Post is warning the community of widespread scam text messages telling customers there are problems delivering a package, or that a parcel won’t be delivered “due to unverified shipping address.”

The text messages use AusPost as the sender name (which means it appears in the same text thread as other legitimate AusPost communications) and asks you to click on a link.

The link leads to a fake website with the Australia Post logo, asking you to verify your address and provide a payment. By entering these details, the scammer can steal your personal and financial information.

Does it affect me?
These text messages have been sent to a large number of people.

The way mobile phones show SMS conversations means this scam message can look like a legitimate Australia Post text message. When scammers pretend to be legitimate or well-known brands to trick you into handing over your personal details, this is known as ‘phishing’.

How do I stay safe?

Remember that Australia Post will never:

  • Email or text message you asking you to click on a link to print out a receipt or label for parcel collection and tracking, or to access your package.
  • Ask you to send an email with your personal or financial information, including any form of ID, passwords, credit card details and account information.

If you are not sure whether an email, text message or phone call is legitimate, contact the organisation the message claims to be from. Do this by searching for contact details on their official website, social media page or other independent source and not from any contact details in the message.

If you believe you have sent any personal information to a scam email address or entered it into a scam website and are worried that your identity may have been stolen, you can contact IDCARE – Australia and New Zealand’s free national identity & cyber support service – on 1300 432 273.

More information
Stay Smart Online has advice on what phishing is and how to protect yourself from it.
Think you can spot a scam (phishing) message? Take our quiz to put your skills to the test: //www.staysmartonline.gov.au/reversethethreat/scammessages

The information provided here is of a general nature. Everyone’s circumstances are different. If you require specific advice you should contact your local technical support provider.
Feedback
Thank you to those subscribers who have provided feedback to our Alerts and Newsletters. We are very interested in your feedback and where possible take on board your suggestions or requests.

Disclaimer
This information has been prepared by the ACSC. It was accurate and up to date at the time of publishing.
This information is general information only and is intended for use by private individuals and small to medium sized businesses. If you are concerned about a specific cyber security issue you should seek professional advice.
The Commonwealth and all other persons associated with this advisory accept no liability for any damage, loss or expense incurred as a result of the provision of this information, whether by way of negligence or otherwise.
Nothing in this information (including the listing of a person or organisation or links to other web sites) should be taken as an endorsement of a particular product or service.
Please note that third party views or recommendations included in this information do not reflect the views of the Commonwealth, or indicate its commitment to a particular course of action. The Commonwealth also cannot verify the accuracy of any third party material included in this information.