Australia Post “Parcel Delivery Unsuccessful” Scam [Explained]

A new parcel delivery scam is making rounds in Australia, catching innocent victims unaware. The sophisticated scam involves text messages and emails falsely claiming to be from Australia Post about an unsuccessful parcel delivery attempt. If recipients click on the provided link, they are directed to a convincing but fake Australia Post website and tricked into providing personal information and even payment. This scam takes advantage of the spike in online shopping and deliveries, especially during the pandemic. Read on to learn more about how this scam works and how to avoid becoming a victim.

AU Post

Australia Post “Parcel Delivery Unsuccessful” Scam Overview

The Australia Post “Parcel Delivery Unsuccessful” scam typically starts with an unsolicited text or email that appears to come from Australia Post. The message claims that multiple attempts were made to deliver a parcel but no one was available to receive it. It then prompts the recipient to click on a link to reschedule the delivery.

However, the link actually leads to a sophisticated fake website impersonating the real Australia Post site. On this fraudulent website, recipients are shown a detailed but fabricated notification about the missed delivery. To “reschedule” the delivery, they are asked to enter personal details like name, date of birth, address, phone number, and sometimes even credit card information. An “express pay” option may also be presented to supposedly cover the cost of the first delivery attempt.

In reality, the entire interaction is a scam designed to steal identities, money, credit card details, and other personal data. The texts and emails are randomly generated with no actual missed parcel. The fake sites are elaborate hoaxes built to mimic Australia Post and trick victims into handing over valuable information and funds.

This scam preys on the spike in online shopping and deliveries, especially since Covid-19 began. With so many parcels in transit, a “missed delivery” seems plausible. But Australia Post warns that legitimate notifications will never ask for sensitive information or payment via text, email or external links. Anyone who receives a suspicious message should not click on any links or provide data.

How the Australia Post “Parcel Delivery Unsuccessful” Scam Works

The “Parcel Delivery Unsuccessful” scam usually starts with a text message or email that looks like it’s from Australia Post. The message will claim that multiple attempts have been made to deliver a parcel but no one was available to receive it.

Some versions of the scam message include details like the recipient’s full name, a parcel tracking number, the delivery address, and claims that the parcel requires a signature. This makes the message seem more legitimate.

The message will then prompt the recipient to click on a link to “reschedule delivery” or “arrange redelivery.” But the link does not lead to the official Australia Post website. Instead, it goes to a sophisticated fake website designed to mimic the look and feel of the real Australia Post site.

On the fake website, the recipient is shown a convincing but completely fabricated notification about the missed delivery. There may be parcel details like a tracking number, sender name, delivery address etc. The recipient is then prompted to enter additional personal information to “verify their identity” and “reschedule” the delivery.

Details requested include full name, date of birth, phone number, billing and delivery address, email, and sometimes even credit card information. The website might also have an “express pay” feature to supposedly cover the cost of the failed first delivery attempt.

In reality, the entire experience is a scam. The texts and emails are sent out randomly, there is no missed parcel, and the fake sites are carefully designed to steal personal identities, credit card details, money, and anything else the scammers can get.

What to do if You Have Fallen Victim

If you entered any personal or financial information into one of these fake Australia Post scam websites, take action immediately:

  • Contact your bank and cancel any compromised cards right away. Also monitor all accounts closely for fraudulent charges and transactions.
  • Change passwords, pins and security questions/answers for any breached accounts, especially email, social media, and financial accounts. Enable two-factor authentication wherever possible.
  • Call the Australia Post Scam Hotline at 1300 30 40 54 for specific guidance related to your situation.
  • Place a ban on your accounts with the credit bureaus to prevent scammers from opening new accounts in your name.
  • File a report with the ACCC via the ScamWatch website. Also notify your local police.
  • Be vigilant about suspicious activity on all accounts going forward. Review credit reports regularly for any accounts opened without authorization.
  • Do not communicate any further with the scammers. Block their emails, texts and phone numbers.

Take swift action to limit the damage. And continue monitoring all accounts closely over the next few months for further suspicious activity.

Australia Post “Parcel Delivery Unsuccessful” Scam FAQ

Why are scammers pretending to be Australia Post?

Australia Post is a trusted brand that most Australians interact with regularly. By impersonating Australia Post, scammers can more easily trick people into lowering their guard and clicking on links or entering information. The high volume of real parcel deliveries also makes a “missed parcel” scam seem plausible.

How are the scam text messages and emails generated?

The scammers use bot programs to generate massive volumes of texts and emails with Australian phone numbers and addresses. Most are sent out randomly in the hope that some will reach real Australians expecting a parcel delivery.

Are the tracking numbers in the messages real?

No, the tracking numbers used are fake and do not match up with any real Australia Post parcels. The numbers are included simply to make the scam feel more convincing. Checking a fake tracking number on the Australia Post website will return an error or “number not found” message.

Why do they want my personal details?

By gathering personal information like names, birthdates, addresses and ID numbers, the scammers can commit identity theft. They sell the data or use it themselves to open fraudulent accounts, take out loans, or engage in other criminal activities while posing as the victim. Credit card details are used to make direct purchases or sold on the dark web.

Is it ever legitimate for Australia Post to ask for financial information over a text or email?

No, Australia Post will never request credit card numbers, bank account details, online account passwords or similar sensitive information over text, email or third-party links. If financial data is required, they will direct the customer to the official website or a Post Office in person.

What happens if I pay the “redelivery” fee on the fake site?

Any money sent to the scammers via the fake sites is lost for good. There is no parcel to redeliver, and any credit card details entered will be used fraudulently. Contact banks immediately to halt payments if you did pay a redelivery fee to the scammers.

Conclusion

The Australia Post “Parcel Delivery Unsuccessful” scam is a serious threat currently making the rounds via text and email. If you receive a suspicious message, do not click any links or enter personal data. These sites are very sophisticated fakes designed to steal identities and money. Monitor accounts closely if you did fall victim and report the scam immediately. Be extra vigilant about deliveries and any communications claiming to be from Australia Post. Don’t let scammers tamper with your hard-earned cash or identity.

How to Stay Safe Online

Here are 10 basic security tips to help you avoid malware and protect your device:

  1. Use a good antivirus and keep it up-to-date.

    Shield Guide

    It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.

  2. Keep software and operating systems up-to-date.

    updates-guide

    Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.

  3. Be careful when installing programs and apps.

    install guide

    Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."

  4. Install an ad blocker.

    Ad Blocker

    Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.

  5. Be careful what you download.

    Trojan Horse

    A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.

  6. Be alert for people trying to trick you.

    warning sign

    Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.

  7. Back up your data.

    backup sign

    Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.

  8. Choose strong passwords.

    lock sign

    Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.

  9. Be careful where you click.

    cursor sign

    Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.

  10. Don't use pirated software.

    Shady Guide

    Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.

To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.