Amazon, PayPal, iCloud, USPS, FedEx, Costco, T-Mobile, Citibank, & MORE — Top Phishing Scams of the Week

This week we’ve found a large number of scams that you need to watch out for, including relating ones to Amazon, PayPal, iCloud, USPS, FedEx, UPS, Walmart, Home Depot, Costco, T-Mobile, Citibank, and Ray – Ban Would you have been able to spot all the scams?

Phishing Scams

This week we found several phishing scams. Conventionally, while impersonating famous brands, scammers send out fake text messages and emails containing phishing links and try to entice you into opening them with various lies. Below are some examples featuring different excuses (lies):

Security Alerts

Falsely claiming that there are safety issues with your online account, scammers prompt you to take action to “recover” or “verify” your account via the attached links that lead to fake login pages of the impersonated brands.

These pages require you to submit log-in credentials to download a software update, change account settings, or other tasks the scammers have asked you to complete. Scammers can record any log-in information you submit so they can use it to gain control of your account and commit other cybercrimes like identity theft.

  • We’ve detected unusual activity on your Amazon‌.‌com account, and your account is locked for security reasons. Visit link below to recover your account: Regards, Ama‌z‌on Ser‌v‌ice
Spot the Scam_Amazon_Login Page_20220729
Fake Amazon login page
  • (paypal service : your account has been suspended, for more information visit > {URL} ~) id
Spot the Scam_PayPal_Fake Login_20220729
Fake PayPal login page

Sample fake PayPal login pages:

  • pypl-page[.]with
  • authsecure[.]paypal[.]with[.]bitsaleshop[.]with

#3 – iCloud

  • your request to unlock your iphone 13 is currently being processed. if this was not you, cancel: {URL} apple support
Spot the Scam_iCloud_Fake Login Page_20220729
Fake iCloud login page
Spot the Scam_Citibank_Email Scam_20220729
Fake Citibank email

Trend Micro Check is a browser extension and mobile app for detecting scams, phishing attacks, malware, and dangerous links — and it’s FREE!

After you’ve pinned the Trend Micro Check extension, it will block dangerous sites automatically! (Available on Safari, Google Chrome, and Microsoft Edge).

TMC_CTA_Extension_2022
You can also download the Trend Micro Check mobile app for 24/7 automatic scam and spam detection and filtering. (Available for Android and iOS).

TMC_CTA_Mobile_2022

Check out this page for more information on Trend Micro Check.

Gift Card

“Take the survey and get a $100 gift card!” Gift card scams are also common, circulating via text message and email all the time. Impersonating famous brands, scammers spread fake giveaway and lottery campaigns, luring you into clicking on phishing links and trying to trick you into revealing your sensitive data.

The attached links often take you to fake online survey pages that state you can claim a gift by filling out an online questionnaire. After you complete the questionnaire, you are prompted to enter credit card details before your “gift” can be delivered. Below are some examples:

Spot the Scam_Home Depot_Phishing Email_20220729
Spot the Scam_Costco_Phishing Email_20220729
Spot the Scam_TMobile_Phishing Email_20220729

Of course, there will be NO gift card. Don’t get scammed!

Delivery Notifications

We’ve reported on delivery scams several times before. Posing as delivery companies, scammers send you fake delivery notifications and claim that you’ve missed your delivery and that you have to click on the attached link to update delivery information.

Again, the links are phishing links, taking you to fake login pages or online survey pages that are designed to collect all your credentials.

  • [us post]- your delivery address is not detailed and the package cannot be delivered, please update the address information at: {URL}
  • USPS – The package address is incorrect, please change or submit the correct address online. {URL}
Spot the Scam_USPS_Fake Login_20220729
Fake USPS page

Sample fake USPS URLs

  • ups-tyiuijki[.]us
  • uspunusualup[.]with
  • CID#: 5056701573 Confirmed Delivery, Tomorrow By 4:00pm https:: Tracking ID # 2354828
Spot the Scam_Walmart_survey_20220729
Fake Walmart survey pages
Spot the Scam_Walmart_survey_20220729_2
Fake Walmart survey pages

#3 – FedEx (email)

“You have (1) package waiting for delivery.”

Spot the Scam_FedEx_scam email_20220729

#4 – UPS (email)

Spot the Scam_UPS_scam email_20220729

Online Shopping Sales Promotions — Ray-Ban

Besides phishing links, scammers also spread links to malicious online shops — as we’ve reported several times. Please beware of fake emails that promote Ray-Ban scam sites:

Spot the Scam_Ray-Ban_20220729

The attached link will lead you to a fake Ray-Ban online shop. Be careful!

Spot the Scam_Ray-Ban_Fake Online Shop_20220729
Fake Ray-Ban website

Sample URLs of fake Ray-Ban online shops:

  • 90 off-sunglasses[.]with
  • 90 off-rb[.]with

Note: ALWAYS pay close attention to the URLs of websites!

How to Protect Yourself

  • Double-check the sender’s mobile number/email address.
  • Free gifts and prizes are always a major red flag.
  • Go to the official website/application instead of using links from unknown sources.
  • Never click on links or attachments from unknown sources. Use Trend Micro Check to surf the web safely (it’s free!).
  • Add an extra layer of protection to your devices with Trend Micro Maximum Security. Its Web Threat Protection, Ransomware Protection, Anti-phishing, and Anti-spam Protection can help you combat scams and cyberattacks. Click the button below to give it a try:

As ever, if you’ve found this article an interesting and/or helpful read, please do SHARE it with friends and family to help keep the online community secure and protected.

Leave a Comment