Australia Post is warning customers to be on high alert as scammers accelerate fake delivery messages and emails in the lead-up to Christmas.
Scammers are taking advantage of the festive rush, targeting groups such as Facebook Marketplace users, according to Australia Post.
They often pose as interested buyers and send links or QR codes via Messenger to fake ‘Australia Post courier service’ websites.
These sites claim that payment will be processed online and that a courier will collect the item once payment is made when, in reality, these fraudulent sites are designed to steal personal and financial information.
Australia Post said this trend reflects a broader national issue with research from Australia Post showing more than 90 per cent of Australians have received a scam text or call, and nearly three-quarters reporting that scams most commonly impersonate shipping and parcel delivery services.
Australia Post chief information security officer Adam Cartwright advised customers to track parcels through the official AusPost app and ignore any message requesting personal or payment information.
“As the pre-Christmas sales ramp up and more Aussies are expecting deliveries, scammers are exploiting that anticipation and urgency to trick people into clicking fake links or handing over personal information,” he said.
“If you receive a message asking for personal or payment details, you can be confident it’s not from us. In fact, the safest way to track your item is through the official AusPost app.”
Australia Post is also seeing a resurgence of sophisticated phishing ahead of Christmas, including the global ‘Darcula’ operation, which rents scam toolkits to criminals that mimic trusted delivery brands.
By sending messages via end-to-end encrypted channels such as iMessage and Rich Communication Services (RCS), Darcula can bypass traditional filters, making these scams harder to detect and block.
