The latest email scam to watch out for involves Royal Mail, customs and a package you need to retrieve.
The official-looking emails claim that a package has been seized by HMRC upon arrival into the UK and that you need to declare them genuine so that they can be returned to you. All you need to do is click a link to a document.
As you might have gussed, this link will install malicious software on your computer designed to steal personal details like account names, email addresses and passwords.
What you should look out for
This is an example email provided by scam awareness body Action Fraud:
Title: Your parcel has been seized
Royal Mail is sorry to inform you that a package addressed to you was seized by HM Revenue & Customs upon arrival into the United Kingdom.
A close inspection deemed your items as counterfeit and the manufacturers have been notified. If your items are declared genuine then they will be returned back to you with the appropriate custom charges.
You may have been a victim of counterfeit merchandise and the RM Group UK will notify you on how to get your money back. Please review the attached PDF document for more information.
Please accept our apologies for any inconvenience this may have caused.
To help spread the virus, the emails say “you will need to have access to a computer to download and open the Zip file.” But it goes without saying that you shouldn't click the Zip file or any other attachments!
How to avoid falling for these scams
The best advice we could give you is to just be careful – unsolicited emails that ask you to download attachments or pass on personal details are surefire signs of a scam. Keep a look out for poor spelling and grammar too.
Royal Mail said that it will never:
- send an email asking for credit card numbers or other personal or confidential information;
- ask customers to enter information on a page that isn’t part of the Royal Mail website;
- include attachments unless the email thread was initiated by you, for example making an enquiry or registering for updates from Royal Mail.
It also stresses that it doesn’t receive a person’s email address when they shop online.