This week we’ve seen a number of phishing scams where scammers impersonate trusted brands like Walmart, USPS, and Ace. Were you able to spot all these scams?
Phishing scam
Impersonating a trusted brand, scammers send text messages or emails that: Phishing Link, tries to make it click. They make up various excuses to get you to click on the link, including free gifts, coupons, account security issues, and fake package deliveries.
These links lead to phishing sites designed to record personally identifiable information (PII), email addresses, credit card numbers, social security numbers, etc. Using these credentials, fraudsters can compromise your bank accounts, steal your personal information, or commit any other crime. Here are some examples:
walmart halloween scam
Halloween is approaching! Many brands are running Halloween sales campaigns, so be careful when you receive promotional emails. This week, a scammer pretended to be from Walmart and sent a fake email saying he had won a Dell Inspiron laptop in his Halloween giveaway campaign.
If you click on a button in the email, you will be redirected to a fake survey page asking for detailed personal information. However, all data submitted ends up in the hands of fraudsters and used for their own benefit. And of course there are no presents.
Avoid scam sites for free
The truth is, there are many scams and fraudulent sites on the Internet, and it is becoming increasingly difficult to detect them. Check out our free browser extension (Trend Micro ID Protection) and free mobile app (Trend Micro Check) for an easy and reliable way to detect and avoid fraudulent sites.
Both Identity Protection and Trend Micro Check can protect against scams, phishing links, dangerous websites, and more. If you come across something dangerous online, you’ll be alerted in real time so you need to be extra careful.
In addition to the emails, the scammers also sent fake text messages purporting to be from Walmart and claiming that they needed to verify the details of a Walmart support case.
- (
Move to <-. *Updated* Support case: BMD6NI8U)
Clicking on the attached link will take you to a fake survey page where your PII may be exposed. Don’t be fooled by scams!
USPS shipping scam
We’ve been reporting on fake USPS delivery text messages for the past few weeks, and it doesn’t seem like they’re stopping.
- Hello. USPS will notify you that your package has arrived at our warehouse but cannot be delivered because the address information is incomplete. Please check the linked address.
Links in such emails will direct you to a fake USPS tracking page. There you will be asked to enter a lot of personal data, which can be accessed by scammers. Please don’t let me!
Examples of fake USPS tracking page URLs (as of October 20, 2023):
- USPS[.]uspkp[.]com
- USPS[.]uspspsk[.]com
- united states postal center[.]VIP
- USPS[.]catch fire parcel[.]com
- USPS Way[.]Up
- USPS[.]mybshippos[.]com
- USPS[.]parcel[.]com
- USPS[.]drop PP[.]com
- USPS[.]safety center[.]VIP
Note: Please double check your web address.The only legitimate domain is usps.com.
Ace Craftsman Generator Email Scam
“You have won the Craftsman Generator!” If you see this email instructing you to use the embedded button to win the Ace Craftsman Generator, please do not click. Free stuff is tempting, but the offer is too good to be true. Clicking the button will take you to a phishing page where all your PII may be recorded. be careful!
Tips for staying safe online
- Please double check the sender’s mobile number and email address. Think twice before taking action, even if it seems justified.
- Never click on suspicious links or attachments. Visit official websites and apps only to make purchases, update information, or track the status of your package.
- If you accidentally give away your PII somewhere, change your password immediately and let your bank or other company know that scammers may be contacting you pretending to be you.
- Check for PII leaks and protect your social media accounts with Trend Micro ID Protection.
- Finally, add an extra layer of protection to your device with Trend Micro Maximum Security. Web threat protection, ransomware protection, anti-phishing, and anti-spam protection help fight fraud and cyberattacks.
If you found this article interesting or helpful, please share it with your friends and family to help keep our online community safe and protected. Also, consider leaving a comment or a like below.