Scam SMS / Email stake out

[Dawie_Botes]

Ok, the idea of this thread is, post a scam SMS / Email which goes to a legit looking, but obviously false site. Post the text of the SMS, with the link, and the date and time it was received. Let's see how fast the site can be closed down, or frustrated (Not asking anyone to do anything bad).

(1) SMS Received - 19 January 2023 at 12:10:

"postoffice: We tried to deliver your package, but there is no postage (0.47 RAND) . Follow please the instructions here : https://s.id/1wK9W"

 

[Dawie_Botes]

(1) reported at https://home.s.id/page/report on 19 January 2023 at 12:28

Interestingly if you access the link via a PC, it redirects to Google, but on the phone it goes to the mimic site.

 

[supersunbird]

Here another one for the post office SMS:

hello loadin

qr23dx.top

 

[Stokstert]

Ok, the idea of this thread is, post a scam SMS / Email which goes to a legit looking, but obviously false site. Post the text of the SMS, with the link, and the date and time it was received. Let's see how fast the site can be closed down, or frustrated (Not asking anyone to do anything bad).

(1) SMS Received - 19 January 2023 at 12:10:

"postoffice: We tried to deliver your package, but there is no postage (0.47 RAND) . Follow please the instructions here : https://s.id/1wK9W"

I got the same, looks really original Postoffice. This is what you get if you open the same as above link.
I am just waiting for deliveries. They ask for R0,47 to be paid by credit card, then one gives the card number, expiry date and ccv number. That's all they need. good luck.

 

[Snyper564]

both wife and I got it what a bizarre sms of late

 

[Dan C]

Got that SMS today too.

 

[Dawie_Botes]

Yup, the main learning is: Never ever fill in any of your info into a website sent via SMS or even Email.

 

[Adenoid Hynkel]

Post Office scam I receive is always sent from a feshdesk account. Freshdesk sometimes takes weeks to block the offending account once reported. Very annoying. I blocked freshdesks Mailservers for now, not ideal, but I've been getting these daily.



Last mail I received linked to: https://lnkd.in/eV-hYj2M

 

[Dawie_Botes]

(1) Original linked killed by S.ID.... Less than a day... Can't complain. Let's see about the others.

Message from S.ID:

Reported Link - hxxps://s[.]id/1wK9W has been Blocked​

Hello, your reported link has been processed, We blocked URL/Domain that has been submitted.

Please use incognito to check the link again.

Thankyou for your reports!