© sylv1rob1/Shutterstock
The holiday season is in full swing and with it, its share of eagerly awaited packages . A boon for cybercriminals who have deployed a formidable scam system, capable of emptying bank accounts in just a few clicks. The scheme is based on impersonating big names in delivery services such as Mondial Relay and Chronopost. A technique that has already claimed thousands of victims across France.
Fraudulent sites that are difficult to distinguish from the originals
The trap usually begins with a seemingly ordinary text message or email. The message, in the colors of Mondial Relay or Chronopost, announces a delivery problem requiring rapid action. Cybercriminals have refined their approach by creating near-perfect replicas of official sites. The differences are almost imperceptible: only the slightly modified URL can alert the most vigilant.
Damien Bancal, a cybersecurity expert at the Zataz blog, has identified dozens of these fraudulent sites. Domains like “ma-livraison-mondialrelay.fr” or “suivi-mondialrelay.fr” are proliferating on the web. These malicious platforms copy official graphic charters identically, making the deception particularly credible for consumers in a hurry to receive their packages.
A terribly effective scam mechanism
The scammers have developed several scenarios to maximize their chances of success. The most common is to claim additional fees for a supposed customs tax or reshipping fees. Time pressure plays a crucial role: victims, fearing they will not receive their packages before Christmas, let their guard down and comply without thinking.
© Unsplash/RoseBox رز باکس
Another popular ploy specifically targets mailboxes. Criminals send an SMS indicating that the package is too large to be delivered. They then propose a simple solution: reschedule the delivery to a relay point for a few euros. This modest request actually masks an attempt to steal banking data.
200% Deposit Bonus up to €3,000 180% First Deposit Bonus up to $20,000Carriers fight back against the threat
Faced with this increase in scams, delivery companies are stepping up their communication. Mondial Relay is issuing a series of warnings and reiterating its official procedures. The company insists: it will never ask for additional payment by SMS or email, nor will it request banking information for a simple delivery.
Cybersecurity services are observing an increasing sophistication of attacks. Scammers are adapting their techniques in real time, taking advantage of periods of high commercial activity to maximize their impact. The accelerated digitalization of Christmas shopping offers particularly fertile ground for these scams.
Mobilization is also being organized on the side of the authorities. The national police and the gendarmerie are increasing prevention campaigns, while cybercrime services are tracking down the networks responsible for these frauds. But the international nature of these scams considerably complicates their dismantling.
Protect yourself effectively against parcel scams
Protection against these scams is based on simple but essential reflexes. First vital step: carefully check the URL of the site before taking any action. Carriers only use official addresses such as mondialrelay.fr or chronopost.fr, without adding terms such as “tracking” or “my-delivery”.
Caution is particularly necessary when dealing with urgent messages requesting payment. Real carriers never ask for payment adjustments by SMS or email. If in doubt about a delivery, connect directly to the carrier's official website by typing its address in your browser. Avoid clicking on links received by message.
To effectively track your packages, keep the tracking numbers provided during your purchases safe. They allow you to check the actual status of your deliveries without going through dubious intermediaries. The holiday season requires increased vigilance, but these good habits will protect you all year long against attempted scams.
- Dozens of fake sites imitating carriers trap consumers
- Scammers use the urgency of the holidays to extort banking data
- Real delivery companies never ask for payment by SMS or email
📍 To not miss any Presse-citron news, follow us on Google News and WhatsApp.
[ ]