{"id":25755,"date":"2025-02-06T10:10:04","date_gmt":"2025-02-06T18:10:04","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2025\/02\/06\/news-19478\/"},"modified":"2025-02-06T10:10:04","modified_gmt":"2025-02-06T18:10:04","slug":"news-19478","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2025\/02\/06\/news-19478\/","title":{"rendered":"New scams could abuse brief USPS suspension of inbound packages from China, Hong Kong"},"content":{"rendered":"\n<p>I would be the last one to provide scammers with good ideas, but as a security provider, sometimes we need to think like criminals to stay ahead in the race.<\/p>\n<p>Recently, the US Postal Service (USPS) announced that it would suspend inbound packages from China and Hong Kong until further notice. That further notice, it turned out, was very short indeed, with the USPS announcing on February 5 that the interruption in service would itself be disrupted\u2014packages were once again approved to enter the country. But the whiplash announcements, the second of which was <a href=\"https:\/\/about.usps.com\/newsroom\/service-alerts\/international\/china.htm\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">dropped with little fanfare<\/a>, have caused confusion.<\/p>\n<p>So, there is an opportunity for scammers to exploit that confusion and uncertainty. Let me spell out how:<\/p>\n<ul class=\"wp-block-list\">\n<li>Scammers could send messages about refunds based on packages that could not be sent.<\/li>\n<li>A revival of the old \u201c<a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2022\/04\/usps-your-package-could-not-be-delivered-text-is-a-smishing-scam\">Your package could not be delivered<\/a>\u201d scam could spring up.<\/li>\n<li>Phishers could send messages about goods that were rerouted through other countries.<\/li>\n<li>Goods\u2014including <a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2024\/10\/europol-warns-about-counterfeit-goods-and-the-criminals-behind-them\">counterfeit<\/a>\u2014could be offered for sale at \u201cpre-tariff\u201d rates.<\/li>\n<li>Malicious messages could claim to arrive from the shipper, the e-commerce platform, or Customs, asking for additional information to get a package released.<\/li>\n<li>Cybercriminals may set up fake USPS sites\u2014as they have done <a href=\"https:\/\/www.malwarebytes.com\/blog\/threat-intelligence\/2023\/07\/malicious-ad-for-usps-phishes-for-jpmorgan-chase-credentials\">in the past<\/a>\u2014to intercept searches for Track &amp; Trace information.<\/li>\n<\/ul>\n<p>Scammers are always looking to make money over other people\u2019s backs. They will usually enter some kind of urgency into their messaging, like a time before which you have to respond. This is a good indicator because they don\u2019t want you to think things through before you act.<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-how-can-you-stay-safe\">How can you stay safe?<\/h2>\n<p>It\u2019s best not to respond to any of these attempts, to avoid letting scammers know that someone is reading their attempts. It will likely cause an increase in spam and other attempts.<\/p>\n<p>Depending on how the scam reaches you and what it is after, there are several ways to stay safe.<\/p>\n<ul class=\"wp-block-list\">\n<li>Use a <a href=\"https:\/\/support.malwarebytes.com\/hc\/en-us\/articles\/18289151807507-Text-Protection-and-Text-Message-Filtering-in-Mobile-Security\">solution that offers text protection and text message filtering<\/a>.<\/li>\n<li>Do not click on unsolicited links or open unsolicited attachments.<\/li>\n<li>Do not trust that sponsored ads lead to the legitimate company, we are seeing too many fakes.<\/li>\n<li>Do not trust links that use <a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2015\/09\/obfuscated-urls-where-is-that-link-taking-you\">URL-shorteners<\/a>, or at least unshorten the link before following it. The same is true for QR codes which are basically URLs in a different shape.<\/li>\n<li>Doublecheck the source of messages through a trusted way of communication with the shipper, e-commerce platform, or customs.<\/li>\n<\/ul>\n<p>And please report fraud attempts with the <a href=\"https:\/\/www.ic3.gov\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Internet Crime Complaint Center (IC3)<\/a>, so others can be warned about common scams.<\/p>\n<hr class=\"wp-block-separator alignfull has-alpha-channel-opacity is-style-wide\" \/>\n<p><strong>We don\u2019t just report on phone security\u2014we provide it<\/strong><\/p>\n<p>Cybersecurity risks should never spread beyond a headline. Keep threats off your mobile devices by\u00a0<a href=\"https:\/\/www.malwarebytes.com\/ios\">downloading Malwarebytes for iOS<\/a>, and <a href=\"https:\/\/www.malwarebytes.com\/android\">Malwarebytes for Android<\/a> today.<\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2025\/02\/new-scams-could-abuse-brief-usps-suspension-of-inbound-packages-from-china-hong-kong\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> News about USPS suspending shipments from China and Hong Kong may give scammers some ideas to defraud consumers <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[32,10574,11931],"class_list":["post-25755","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-news","tag-scams","tag-usps"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=25755"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25755\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=25755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=25755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=25755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}