Evri has issued a pressing alert to all its customers, particularly those using iPhones, as people have suspiciously noticed money being deducted from their accounts. This is part of a new scam where fraudsters are sending deceptive fake Evri profiles to iPhone users in targeted attacks, leading to innocent people having money unjustly taken from their bank accounts.
Every year, a significant number of people in the UK become victims of courier and delivery scams, resulting in losses totalling millions of pounds. A recent survey revealed that 40% of people in the UK who fell victim to fraud or scams over the past year were unable to recover any of their lost funds. The study, conducted by Yaspa, a Pay by Bank service provider, also found that the average amount lost per person due to fraud was £765.
In a new warning, Evri states it is aware of the ongoing scams and has noted a 10% increase in phishing scams. It also reports that in recent months, the delivery company has dismantled more than 18,000 malicious scam sites and counterfeit social media profiles, reports the Mirror.
A spokesperson said: "Evri, one of the UK's largest dedicated parcel delivery companies, is committed to protecting the privacy and security of its customers and took down more than 18,000 malicious scam sites and fake social media profiles in recent months, with 73% removed within 48 hours.
"However, delivery scam messages aren't slowing down, with an almost 10% increase reported last year. Evri today issues an urgent warning about a new scam targeting iPhone users and is reminding consumers how to stay safe and avoid delivery scams."
Example of scam doing the rounds (Image: Evri)
The alert and updated guidance, which impacts thousands of consumers throughout the UK monthly, has been released as the firm cautions that cybercriminals are now attaching profiles to their phishing attempts, hoping the public will click on these attachments in their latest scheme.
When downloaded, these profiles can modify iPhone settings without the user's awareness. They might reroute traffic through the hacker's system, potentially intercepting and analysing personal information before it reaches the internet.
Alternatively, they could modify other policies and security configurations that users have established on their devices without consent. Evri reports discovering additional proof that iPhone users are being deliberately targeted. Users are being encouraged to copy and paste a harmful link into Safari, an application unavailable on Android handsets. Evri considers this evidence of increased sophistication amongst cybercriminals.
This Morning guest recalls husband's scam ordeal
The organisation states these fraudsters seem to be shifting from general, cross-platform phishing toolkits towards bespoke attacks crafted exclusively for iPhone owners. Phishing occurs when criminals deploy fraudulent emails and text messages to deceive victims.
The objective is typically to direct consumers to a website that may capture banking details or other personal data. They frequently masquerade as a trusted organisation. These methods can be highly persuasive and regularly employ authentic-looking branding and communication.
The Evri spokesperson continued: "Evri works closely with several leading external cybersecurity partners, such as Netcraft, BT, Clickatell, and the UK Government's National Cyber Security Centre, to identify delivery scams using Evri's name and remove them as quickly as possible."
Evri is urging customers to exercise heightened caution when purchasing online. The firm is providing essential guidance on warning signs to watch for, which it terms the three L's.
Language - poor language and badly written messages.
Lack of - there is a lack of a personal greeting and personal information, such as a tracking number for your delivery address.
Links - unusual links or buttons that urge customers to take action, such as paying a re-delivery fee; Evri will never charge for this.
Shoppers are being encouraged to flag suspicious behaviour. Details on how to proceed are accessible on Evri's website: evri.com/cyber-security. Specialist partners will examine all communications and dismantle related fraudulent sites
Consumers should additionally report any dubious emails to report@phishing. gov.uk or forward questionable text messages to 7726 at no cost. Should a consumer believe they've fallen prey to these scams, they should contact their bank or card provider straight away and report the fraud to Action Fraud on 0300 123 2040.
Lee Howard, Head of Information Risk and Information Security at Evri, said: "Delivery scams continue to become more sophisticated, and as a business that puts its clients and customers first, we are committed to working proactively to tackle this. This latest scam clearly shows scammers continue to innovate and are now turning to targeting specific consumer groups and we're urging people to stay vigilant and re-issuing important guidance, which will protect the public."
Lord Hanson, Minister for Fraud, said: "The reason our campaign is called 'Stop! Think Fraud' is precisely because of scams like this. What seems like an everyday message from a trusted delivery company is deliberately designed to catch us out.
"Every time you get a message on your phone, email or social media, stop and don't let fraudsters win. Through our Plan for Change, this Government is ramping up efforts with a tougher, expanded Fraud Strategy to help working people protect every pound."
On X, Action Fraud says: "Not sure if a message you've received is real or fake? Contact the organisation directly using contact info on their official website. Do NOT use the number or link in the message Find out more: https://stopthinkfraud.campaign.gov.uk/ ... ing-email/."