https://whitelabel-manager-production.ams3.digitaloceanspaces.com/thumbs/bhl-b63f8.png_800x.png
June 22, 2022
Author: Trend Micro

Shipping Scams of the Week: BHL and USPS

This article is from Trend Micro.

This week we’ve discovered two new parcel shipping scams currently making the rounds: the oddly familiar-sounding “BHL”, as well as fake United States Postal Service alerts. Read on to find out more.

BHL Shipping Scam

So it seems there’s a great new parcel service on the scene, BHL! Unfortunately, it’s yet another cheap scam and the reason it might sound familiar is that the scammers have borrowed the DHL company brand — even going so far as to mimic its colors, logo, and web design.

bhl-1-da3dc.png

Sample phishing email. Source: Reddit


Netizens have reported receiving phishing emails which claim a parcel-related alert message is waiting for you on their website. If you follow the phishing link, you will be taken to a fake webpage at which point you’ll be required to enter personal information to get your parcel. Below is an example (URL: xanthinetruck[.]com):

bhl-2-40ad2.png

Sample webpage. Source: Reddit


The scammers are banking on would-be victims being foolish enough to fall for a ploy as simple as replacing a “D” with a “B”. Prove them wrong!

USPS Shipping Scam

Netizens have also reported receiving phishing emails from scammers posing as USPS. In the emails, it is claimed that a parcel has been blocked until further instructions are supplied by the would-be victim.

bhl-3-b97fa.png

Sample phishing emails


Following the links will take the victim to a phishing page where they are required to enter personal information. Don’t do it! This information can be used not only for data harvesting, but also for monetary theft and even identity theft. Lastly, watch out for these malicious URLs currently being utilized:

  • uspsxc[.]com
  • usa[.]spsusa[.]top

How to Protect Yourself

Double-check the sender’s email address. Beware of typos and strange URLs.
Reach out directly to official websites if you think there are issues with your package.
NEVER use links or buttons from unknown sources! Use Trend Micro Check to detect scams with ease: Trend Micro Check is an all-in-one browser extension and mobile app for detecting scams, phishing attacks, malware, and dangerous links — and it’s FREE!

trading-3-85b27.png

After you’ve pinned Trend Micro Check, it will block dangerous sites automatically! It’s available on Safari, Google Chrome, and Microsoft Edge.

trader-4-23c82.png

You can also download the Trend Micro Check mobile app for 24/7 automatic scam and spam detection and filtering. (Available for Android and iOS).

Check out this page for more information on Trend Micro Check. And as ever, if you’ve found this article an interesting and/or helpful read, please do SHARE it with friends and family to help keep the online community secure and protected.

Source: Pexels.com

About Us Check Yourself Contact Disclaimer
Developed By: scamadviser-logo