Scammers are getting smarter: Evri issues warning to iMessage users as scams reach an all time high.
7th May 2024: Evri, the UK's largest dedicated parcel delivery company, is committed to protecting the privacy and security of its customers and has issued an updated warning about scammers becoming smarter.
The renewed guidance on phishing messages, which affects thousands of consumers across the UK each month, has been issued ahead of CYBERUK - the UK government’s flagship cyber security event. The company has revealed a 174% increase in reported scams from April 2023 to April 2024 whilst it has successfully closed down more than 5,000 scam sites in the last year, a 268% increase year on year.
Phishing is when criminals use scam emails and text messages to trick victims. The aim is often to make consumers visit a website, which may steal bank details or other personal information. They will often pretend to be an organisation you trust. These tactics can be very convincing and often use genuine-looking branding and messaging.
Evri works closely with a number of leading external cybersecurity partners such as Netcraft, Clickatell and the UK Government’s National Cyber Security Centre to identify delivery scams using Evri’s name and remove them as quickly as possible.
Evri’s core advice remains the same, which is to look out for:
· Poor language
· A lack of personal greeting
· Unusual links
However, scammers are getting smarter and using techniques to avoid defence measures. Evri is alerting consumers to look out for an increase in messages coming via iMessage; Apple’s encrypted messaging service, and Rich Communication Services (RCS); a similar technology used on Google Android devices. These services are intended to replace more traditional SMS, and are great for things such as personal privacy, but mean any defences available to Evri’s specialist partners, such as flagging text messages for malicious links, don’t work. This makes it ideal for scammers to use these services as they have a much higher chance of their messages getting through.
Evri is also urging consumers to report suspicious activity, information on how to do that is available on Evri’s website: evri.com/cyber-security. All messages will be investigated with expert partners to take down associated fraudulent websites. Consumers should also report any other suspicious emails to report@phishing.gov.uk. Text messages should also be reported by forwarding to 7226, which is free.
If a consumer thinks they’ve been a victim of these scams they should:
· Talk to their bank or card provider immediately
· Report the scam to Action Fraud on 0300 123 2040
"These criminals use the ‘spray and pray’ method, taking advantage of the millions of parcels we deliver to households every day. They know sending thousands of messages every day means some of them are likely to reach some people expecting a parcel. Lots of these messages try to charge a ‘redelivery fee’ which is nonsense – we will attempt delivery three times before an item is returned and there is no charge. Gmail and Hotmail have pretty much got it nailed in terms of diverting phishing emails to quarantine folders whereas smaller mail providers seem to be less effective because their maturity is not at the same level.”
Richa Bhuttar, Chief Information Security Officer at Evri