Hot Phishing Scams of the Week: FedEx, Discord Nitro, COVID-19, WhatsApp, USPS, LinkedIn, and More!

Author: Trend Micro

October 30, 2021

This article is from Trend Micro.

Check out the top Discord, SMS, and email phishing scams of the week! Would you be able to spot the scams?

Discord Nitro Phishing

We’ve reported on Discord bitcoin giveaway scams before, and now scammers have discovered a new tactic to exploit you on Discord — with Discord Nitro!

Discord Nitro is a paid service for a better Discord experience with lots of extra benefits. Scammers contact you on Discord, claiming that they’ve got an extra Discord Nitro account and that you can claim it via an attached phishing link, leading you to a fake Discord login page:

Source: Reddit

SMS Phishing

Disguising themselves as big brand names, scammers will try to lure you into clicking on attached phishing links they include in text messages, aiming to steal your personal information. All the credentials you enter on the phishing page will end up in scammers’ hands. These are some of the variants of the scams we’ve noticed this week:1

1. FedEx Package Delivery

In FedEx shipping scams, scammers prompt you to click on phishing links leading to a fake FedEx login page. They say you have missed your package or that there are issues with the delivery:

  • hi delia, fedex is delivering your order today! to verify delivery address, please enter your information here now >><URL>
  • frm:fedex87150 msg:courier driver couldn’t deliver your parcel today, <URL>
  • frm:96092452-Notifications-MSG: We got your package in storehouse <URL>
  • frm:676442-Fedex MSG: Due to no safe place to leave it the package no 88778688953 was returned to the repository,! <URL>

 

Source: Reddit

2. Walmart COVID-19 Relief Program

Walmart is sending out COVID-19 relief? No! We’ve written about COVID-19 stimulus / bonus scams before. Scammers impersonate Walmart and falsely claim that you can apply for their COVID-19 relief program via a link they send:

Source: Reddit

  • Your $1,820 is now available from Walmart COVID-19 Relief Program, Apply here: <URL>

Again, the link will take you to a fake login page or online form that requires you to submit personal information (to the scammers)!

3. iPhone 13 Survey Scam

iPhone 13 remains a hot topic, and there are more and more scams featuring it as a “reward.” If you receive messages claiming you’ve won an iPhone 13, don’t take the bait! The link attached in the SMS will lead you to an online survey page where you will eventually have your personal data, such as credit card numbers, stolen by scammers.

  • hey its me Jeffery Please remember to schedule <URL>

4. Gift Card Survey Scam (Tesco, Argos, and Primark)

Besides iPhone 13, scammers utilize other rewards to lure you into clicking on the phishing link. In the latest gift scam, scammers tell you that you can win gift cards for famous brands like Tesco, Argos, and Primark by filling out an online survey:

  • Todays 3 iPad winners: 1st – Kimberly J. 2nd – YOU (Eduson) 3rd – Hank Jr. Read more here: <URL>

No matter which rewards you choose, you will be led to a fake PayPal login page. Remember, again, scammers can record the credentials you enter here and hack into your PayPal account!

5. Google Security Alert Scam

Google security alert via text messages? It’s a scam! Posing as Google, scammers tell you that there are security issues with your Google account and instruct you to check the status via the attached link:

  • google: unusual activity on your account. check and confirm with us: <URL>

The link, a phishing link, takes you to a fake Google login page. By now you know what will happen: don’t type in your account and password!

6. American Visa Lottery Scam

Scammers also create fake American Visa lotteries, falsely claiming they are giving away Green Cards. On the fake registration page, you will be asked to provide personal information:

7. WhatsApp Survey Scams

Scammers tell you that WhatsApp will stop working on your device and you have to share a scam message with your WhatsApp contacts to reactivate the service. Or, scammers claim that they are giving away 50GB of internet for WhatsApp’s anniversary campaign:

Email Phishing

Phishing scams also appear in fake emails.

1. USPS Package Delivery

We’ve seen various package delivery scams. Posing as USPS, scammers send a fake delivery notification and prompt you to view details via an embedded button. Guess what? The hyperlink is a phishing link, leading you to a fake USPS login page.

2. LinkedIn Job Search Scam

Looking for jobs online? Be careful of fake email notifications from LinkedIn! If you take a closer look, you will find that the sender’s emails address is NOT a legitimate LinkedIn email.

3. WhatsApp Voicemail Scam

“You have a new voicemail!” Don’t click on anything! Fake WhatsApp emails urge you to click on the button to listen to the voicemail. As we’ve mentioned before, the button is a phishing link and you could end up exposing your WhatsApp login information or other personal data.

How to Protect Yourself

  • Double-check the sender’s mobile number/email address.
  • Free gifts or prizes are always a major red flag.
  • Reach out to an organization’s customer service directly for help and support.
  • NEVER click links or attachments from unknown sources. Use Trend Micro Check to detect scams with ease!

1. After you’ve pinned the Trend Micro Check browser extension, it will block dangerous sites for you automatically:

2. Send links or screenshots of suspicious text messages to Trend Micro Check on WhatsApp for immediate scam detection.

Don’t forget to add an extra layer of protection to your device with Trend Micro Maximum Security! It includes Web Threat Protection, Ransomware Protection, Anti-phishing, and Anti-spam Protection to help you combat scams and cyberattacks. Click the button below to give it a try:

Did you successfully spot the scams? Remember, always CHECK before giving out personal information. If you found this article helpful or interesting, please SHARE it to help protect your friends and family!

 

Report a Scam!

Have you fallen for a hoax, bought a fake product? Report the site and warn others!

Help & Info

Popular Stories

As the influence of the internet rises, so does the prevalence of online scams. There are fraudsters making all kinds of claims to trap victims online - from fake investment opportunities to online stores - and the internet allows them to operate from any part of the world with anonymity. The ability to spot online scams is an important skill to have as the virtual world is increasingly becoming a part of every facet of our lives. The below tips will help you identify the signs which can indicate that a website could be a scam. Common Sense: Too Good To Be True When looking for goods online, a great deal can be very enticing. A Gucci bag or a new iPhone for half the price? Who wouldn’t want to grab such a deal? Scammers know this too and try to take advantage of the fact. If an online deal looks too good to be true, think twice and double-check things. The easiest way to do this is to simply check out the same product at competing websites (that you trust). If the difference in prices is huge, it might be better to double-check the rest of the website. Check Out the Social Media Links Social media is a core part of ecommerce businesses these days and consumers often expect online shops to have a social media presence. Scammers know this and often insert logos of social media sites on their websites. Scratching beneath the surface often reveals this fu

So the worst has come to pass - you realise you parted with your money too fast, and the site you used was a scam - what now? Well first of all, don’t despair!! If you think you have been scammed, the first port of call when having an issue is to simply ask for a refund. This is the first and easiest step to determine whether you are dealing with a genuine company or scammers. Sadly, getting your money back from a scammer is not as simple as just asking.  If you are indeed dealing with scammers, the procedure (and chance) of getting your money back varies depending on the payment method you used. PayPal Debit card/Credit card Bank transfer Wire transfer Google Pay Bitcoin PayPal If you used PayPal, you have a strong chance of getting your money back if you were scammed. On their website, you can file a dispute within 180 calendar days of your purchase. Conditions to file a dispute: The simplest situation is that you ordered from an online store and it has not arrived. In this case this is what PayPal states: "If your order never shows up and the seller can't provide proof of shipment or delivery, you'll get a full refund. It's that simple." The scammer has sent you a completely different item. For example, you ordered a PlayStation 4, but instead received only a Playstation controller.  The condition of the item was misrepresented on the product page. This could be the