Fake Shipping Notifications — an annual email scam

Yes, it’s that time of year again. Fake shipping notifications — email messages purporting to be from mainstream shippers (FedEx, UPS, etc.) saying that delivery of a parcel / package was attempted — directing you to open an attachment or click on a link.

As pointed out in last year’s post “Holiday Cyber Risks” (December 15, 2013), spoofed emails are all too common this time of year.

The latest scam that I’ve seen claims to be from “FedEx First Overnight” with a subject “Ship Notification.” Of course, the sender’s email address (which probably’s spoofed) is bogus, as well as the return path (meaningless also). The scam declares that “To receive your parcel, print this label and go to the nearest office.” The message contains an encoded link to a malicious Web site.

Remember, you can always go to the shipper’s Web site directly (in your favorite Web browser) or call to check status.

Also watch out for fake e-card and gift card scams.