I just got an email tonight from “Manager Joshua Wagner” at FedEx saying they tried to deliver my package but I wasn’t home. They said, “to receive your parcel, please, print this receipt and go to the nearest office.” Then there’s a big button that says, “Print Receipt.” The whole thing looks very official, with real FedEx logos and everything.
So did I click the link? ABSOLUTELY NOT! Here’s why:
1. First I noted the fact that I am not expecting a package.
2. I know we were home when the email said that they tried to deliver the package.
3. I looked at the actual email for “Manager Joshua Wagner” and it said, “firstname.lastname@example.org.” I’m fairly certain that if I get a legitimate email from FedEx, it would be from “Whoever@fedex.com.”
4. The email provided a “tracking number.” I opened up my web browser and typed in fedex.com. I entered the provided tracking number, and lo and behold: “No record of this tracking number can be found.”
5. I did a Google search for “Fake fedex email” and found out that if I had clicked on “Print Receipt” I would have been the recipient of the Trojan.Smoaler virus. I liked what Symantec said about this scam: “We should all know by now that the only unordered parcels we ever receive are gifts from Santa Claus.”
Moral of the story: DON’T open emails from people you don’t know, DON’T click on links to known companies you get in email (go directly to their main website instead), and ALWAYS be cautious when opening anything in email.
Forewarned is forearmed.