Phishing?
Phishing occurs when scammers use deceptive emails, text messages (SMS-phishing or smishing), or phone calls (voice phishing or vishing) to deceive victims. The goal is typically to lead you to a website that could infect your device with a virus or pilfer sensitive information like bank details. These scammers often masquerade as someone or an organization you trust, employing authentic-looking branding and messages. Their tactics are designed to be persuasive, urging quick action to prevent you from contemplating their requests.
Recognising fraudulent messages or calls?
Such attacks often stand out due to their unusual nature or unexpected content, such as references to unexpected parcel deliveries. If you harbor any uncertainties about a message or suspect someone’s identity, refrain from responding. Instead, directly reach out to the organization involved. Avoid using contact details provided in the message; opt for the official website’s details. Scam messages might exhibit the following characteristics;
1, Keep an eye out for sentences with subpar language, marked by spelling and grammatical mistakes.
2, Be cautious if you receive messages lacking a personal greeting. Instead of addressing you by your account name, they might use generic terms like ‘Dear Customer’ or ‘Dear [your email address],’ though criminals are increasingly adept at personalising messages.
3, Be cautious if every parcel-related email contains links or buttons prompting you to click. Prior to clicking, hover over the button or URL to verify its destination. If it reveals an unfamiliar address, there’s a possibility it could be a scam.
4, Watch out for an email address that appears unusual or vague. It might deviate from the typical format you receive from that company, possibly featuring slight misspellings or different formatting.
The National Cyber Security Centre has provided detailed guidance on identifying and addressing fake “missed parcel” messages in case you’ve clicked on one.
Generally, individuals will be contacted by email or text message to inform them of the parcel’s status in the delivery process, sometimes including a tracking link. Customers might also receive emails or text messages requesting information for an ongoing claim.
How Evri will contact you?
The emails will typically originate from addresses ending with @evri.com, @hermes-europe.co.uk, or @myhermes.co.uk. SMS messages:
- Won’t display the sender name as a mobile phone number
- Will never request payment
- Will never contain a link, except for a tracking link named https://evri.link/…… (Exercise caution, as even if the link appears as https:/evri.link/….., authenticity is not guaranteed. If uncertain, refrain from clicking the link and abstain from entering personal details – refer to the Fake “missed parcel” messages section above.)
Invoice Fraud?
Invoice fraud, also known as mandate fraud or payment diversion fraud, occurs when individuals manipulate you into altering financial details (such as Direct Debit, standing order, or bank transfer mandates) to deceive you or your organization, redirecting payments to someone else. This can transpire both in a personal and professional context.
An invoice fraud attack may be executed through phone calls, emails, or written communication. Regardless of how authentic it appears, if you are part of an organization, adhere to standard procedures for modifying bank details before taking any action. For personal matters, use your own information to communicate with and authenticate details with the legitimate third party, especially in the case of online payments.