Fraudsters are using fake DPD (parcel delivery) messages to lure victims into a phishing scam. The messages state that the recipient has missed two attempted deliveries of a parcel, and provides instructions on how to arrange another delivery. The links in the messages lead to fraudulent websites that request a payment (£2 – £3) to rearrange the delivery.
If the victim makes this payment, they’ll receive a phone call within a few days from someone purporting to be from their bank to inform them about suspicious transactions on their account. They may also receive text messages, purporting to be from their bank, confirming these transactions. The victim is informed that their bank account may be compromised and is instructed to transfer their money to what they believe is an alternative secure account in order to prevent further losses.
In other cases, suspects have gained enough personal details and security information during the phone call with the unsuspecting victim, to enable them to take out a loan in the victim’s name. The fraudsters then transfer the loan to an account under their control. Fraudsters are able to use a tactic called ‘spoofing’ to make the call or text appear genuine by cloning the phone number, or sender ID, used by the bank.
What you need to do
- There is an easy way to check the email or text is safe, only emails sent from one of three DPD email addresses are genuine. These are dpd.co.uk, dpdlocal.co.uk or dpdgroup.co.uk.
- Your bank, or other official organisations, will never ask you to share personal or financial information over the phone, or via text or email. If you need to check that it’s a genuine message, contact them directly.
- If you have received an email which you’re unsure about, you can report it by forwarding it to email@example.com. You can report suspicious text messages by forwarding them to 7726.
- If you have acted upon a message you have received, and you think you may be a victim of a fraud, contact your bank immediately and report it to North Yorkshire Police on 101 or Action Fraud online at actionfraud.police.uk or by calling 0300 123 2040.
North Yorkshire Community Messaging (NYCM) is managed by North Yorkshire Police. The official website is www.nycm.co.uk which will allow you to sign into your account to change your delivery method preference or locations of interest. It also contains a FAQs section, which may assist with any queries you have.
Links and attachments: North Yorkshire Police will only ever link you to secure web-sites we trust, we will only send you attachments where we believe it is absolutely necessary.
If you need to contact North Yorkshire Police please call 101 or in an emergency dial 999. Alternatively please email any non urgent enquiries to: firstname.lastname@example.org