Got tricked by a fake "your package is held" text yesterday

I almost clicked a link in a text that said my Amazon package was stuck at the local facility. Looked totally legit with the right tracking number format and everything. I was about to tap it until I noticed the URL was something like "amaz0n-delivery.net". Called the restaurant to ask my buddy if he ordered anything and he said nope. Total phishing attempt. Has anyone else been getting these texts lately? They seem way more convincing than the old ones.

2 comments

2 Comments

corad8425d ago

The "amaz0n-delivery.net" part got me. That's almost too clever with the zero replacing the o. I stared at my phone for a solid minute trying to remember if I'd actually ordered anything last week. Almost fell for one that said my bank account was locked and I needed to verify my info. The URL was something like "bankofamerica-secure-login.com" and I actually tapped it before my brain caught up.

white.elizabeth25d ago

Oh man, the bank one is rough. But to be fair, I think "bankofamerica-secure-login.com" would actually be a legit subdomain if it was set up right, like how some companies do "support.companyname.com" for their help pages. The problem is scammers grab names that look official but aren't actually part of the real domain. I almost clicked a "fedex-delivery-failure.com" link last month because I was waiting on a package and my brain just saw "FedEx" and "delivery" and went into autopilot mode.