March 20, 2024, 7:27 am | Read time: 4 minutes
In the digital age, scams are unfortunately not uncommon. And even though scammers constantly come up with new schemes, there is often one big constant: They exploit the names of large, well-known, and above all, reputable companies. TECHBOOK explains how to recognize fake SMS messages.
Did you receive a message that your DHL package is in the warehouse but cannot be delivered due to incomplete address details? Or that you need to confirm your account details with Netflix? Behind these are criminals who want to obtain your personal data via phishing. But how can you recognize such scam SMS messages?
Scammers Send SMS in the Name of Big Companies
The insidious part of many such scams is that the criminals pose as someone acting on behalf of a large, recognized company. The scammers rely on the trust effect that names like DHL, Netflix, or a bank institution evoke. Phishing emails are a common method for this, but so are SMS messages. The State Criminal Police Office (LKA) of Lower Saxony, among others, warns about this.
Currently, there seems to be an increase in such incidents. One scheme is that a delivery cannot be made until certain information is confirmed. Another is that the recipient was not available, so now information must be confirmed for the package to be delivered elsewhere. There are also reports from customs about suspicious items being secured in a package.
Such messages are always linked to a URL. This supposedly leads to a corresponding page. Often, the message also suggests a high level of urgency. If you do not respond, the package will supposedly be returned.
By the way, the collective term for such SMS scams is “smishing.” You can find detailed information about it in our overview article.
Strange Package Notifications via SMS? It’s a Scam
Beware of Fake DHL Pickup Notices
How to Recognize Scam SMS Messages
The mechanics of the scam are essentially always the same: In the end, you are supposed to click on the link and confirm or re-enter your data. If you click on it, you land on fake websites that mimic those of the respective companies or service providers. The goal of these scam SMS messages is always to obtain data such as usernames, passwords, or payment information.
Therefore, check the following things:
- From which number does the message come? Official numbers from DHL and others can also be found on the respective websites, so you can easily verify this. Important: This is not a guarantee for recognizing a scam SMS! There are also technical ways to disguise a number; however, it is a good first point of contact and often uncovers simple scams.
- Pay attention to style and spelling. Although there are also sophisticated schemes here, small details like extremely complicated or somewhat casual phrasing can be a clue.
- Important: Never click on a link in an SMS without thorough examination. Your bank will not ask you to confirm data this way, nor will DHL or Netflix. While it does happen that package delivery services contact customers via SMS, it is more likely to be a notice that your shipment can be tracked via the official website and tracking number or something similar.
If you are unsure about an SMS, you can also inquire with the specified company in case of doubt.
A Successful Attack Means a Lot of Work
If you have entered data on such a site, meaning you have fallen for the scam, you should change your password with the affected service or possibly inform your bank. It is also advisable to file a criminal complaint with the local police or through the online police station of your state.
Additionally, it is generally worthwhile to activate the so-called two-factor authentication (2FA) in advance for all services that offer this effective security feature in their settings. With active 2FA, attackers cannot access an account even with a stolen password, because an additional second code is required, which the criminals cannot have. This is generated anew for each login, for example, by an app on the smartphone.
With material from dpa.