Ryan Gaines, CEO of Fastway Couriers South Africa.
Against this backdrop, scammers are posing as legitimate courier companies through convincing SMS messages and emails claiming that a parcel cannot be delivered until a customs fee, delivery charge or other payment has been made.
These messages often contain links to professional-looking websites designed to capture banking details, card information or other personal data.
"Courier companies have become trusted brands in consumers' lives, which unfortunately makes them attractive targets for criminals," says Ryan Gaines, CEO at Fastway Couriers South Africa. "When people are expecting a parcel, they are naturally more inclined to trust a delivery notification. That's exactly what scammers are relying on, which is why knowing the warning signs has become just as important as knowing when your parcel is due to arrive."
Fastway may notify recipients when a parcel is out for delivery, with these messages intended to provide updates on the delivery journey. In certain cases involving international shipments, however, legitimate duties, taxes or related charges may need to be settled by the recipient. These requests are communicated through Fastway's official channels, including its verified WhatsApp account.
If you are unsure about a notification, don't use the links or contact details contained in the message. Instead, verify the delivery with the retailer you purchased from or contact Fastway using information obtained independently from its official website.
Fastway says there are five simple checks consumers can make before responding to a delivery notification or making a payment:
- Unexpected payment request? Verify it before paying. A request for customs charges, delivery fees or other payments that you weren't expecting should prompt you to check before acting. While legitimate charges can apply to certain international shipments, Fastway payment requests will come through official channels. If you're uncertain, contact the retailer or Fastway directly using independently sourced contact details.
- Check who sent the message. Don't rely on the display name alone. Scam emails may originate from generic Gmail or Outlook accounts, contain random strings of letters and numbers, or use domains unrelated to the courier company. SMS sender names can also be spoofed to appear legitimate.
- Look beyond a professional-looking website. Fraudsters can create convincing websites that closely resemble legitimate courier platforms. Before entering any information, check that the web address matches the courier company's official website. Never use a payment link contained in a message you suspect may be fraudulent.
- Be wary of pressure and urgency. Messages claiming that your parcel will be returned or destroyed, or that you will incur additional charges unless you act immediately, are designed to create panic and discourage you from checking whether the request is genuine.
- Protect your personal information. If you are uncertain, don't enter banking, card or personal information. Close the message and verify the delivery through a trusted channel. If you've already entered banking or payment information on a suspicious website, contact your bank immediately.
Courier scams can be particularly convincing when criminals already have access to information such as an email address or other personal details exposed through a previous data breach.
Consumers can use free services such as Have I Been Pwned to check whether an email address has appeared in a known data breach. The service aggregates known breaches to help people identify where their personal information may have been exposed.
Importantly, finding your email address in a breach does not necessarily mean your email account itself has been hacked. It means information associated with that email address was included in a known breach.
If your details do appear in a breach, change any affected passwords, particularly passwords you've reused across other accounts, and enable multi-factor authentication where available. Have I Been Pwned also offers a separate service that allows consumers to check whether a password has previously appeared in a known breach.
"Being able to recognise a suspicious message is important, but consumers also need to know what to do next. Verify an unexpected request through a trusted channel, understand whether your personal information may already have been exposed and act immediately if you've shared financial information.
"Scammers rely on people reacting instinctively rather than stopping to check," concludes Gaines. "A legitimate courier wants to deliver your parcel, not catch you off guard. If something feels out of the ordinary, take a moment to confirm that the message is genuine. Those few extra seconds could prevent significant financial loss."
For more information on Fastway Couriers, visit Fastway Couriers South Africa.
