Mail delivery phishing scammers cheat Hongkongers out of HK$2.2mil as demand for delivery during Covid-19 pandemic surges

Criminals sent victims fake messages or emails purportedly from Hongkong Post asking for credit card details to cover a mailing fee, police say. The information was then used to make online purchases, with one man cheated out of HK$75,000. — SCMP

Scammers have cheated more than 100 Hongkongers out of HK$2.2mil (RM1.17mil) since November through phishing text messages and emails purporting to be from Hongkong Post, while demand for delivery services during the coronavirus pandemic surged.

Many of the fake messages told victims they had a parcel delivery pending but the recipient address was incomplete, according to the police’s cybersecurity and technology crime bureau. Scammers then directed victims to a controlled website and asked for a postal fee of a few dollars.

Superintendent Terry Cheung of the police’s cybersecurity and technology crime bureau. Photo: Nora Tam

“Scammers were not after such a small amount of money, but instead the credit card details provided by the victims,” Superintendent Terry Cheung Tin-lok said on Tuesday. “Then the culprits used the stolen data to go shopping.”

Police had received reports from 120 victims who had lost a total of HK$2.21mil (RM1.17mil) since November. In the single largest case, a 39-year-old man lost HK$75,000 (RM39,902) in January after falling for a trap similar to the phishing email scam. Not knowing who had sent the parcel, the victim paid the “delivery fee” with his credit card. The next day he received a call from his bank notifying him four online transactions totalling HK$75,000 (RM39,902) had been made with the card, prompting him to alert police.

Kenneth Wu Pak-kin, Hongkong Post’s director of operations, said the city’s postal service would not send a text or email notification to anyone. Instead, a postal worker would leave a mail collection notification card at a person’s home address if delivery failed.

“If the address is wrong, the mail would be returned to the sender,” Wu said. “Hongkong Post does not request anyone to confirm nor provide mailing address through emails, social media or SMS. We also do not ask for tariffs on behalf of customs or postal services of other jurisdictions.”

Bureau head Frank Law Yuet-wing suspected that victims were easily lured into the scams by the small amount of money requested. The pandemic had also made people rely more heavily on postal service for daily necessities and online shopping, he said.

Both Law and Cheung also warned people to remain vigilant over scams reported overseas in which criminals asked victims for payment or bank details for a Covid-19 jab that was supposed to be free.

According to the government’s Hong Kong Computer Emergency Response Team, the number of reports it received about network security incidents dropped 12 per cent to 8,346 last year. Among them, 42%, or 3,483, involved phishing websites, representing a 35% increase compared to 2019. The force’s cybersecurity and technology bureau had removed 183 such websites since October. – South China Morning Post

Article type: free
User access status:
Join our Telegram channel to get our Evening Alerts and breaking news highlights

Fraud , scam


Next In Tech News

Researchers: Patients should get robotic surgery for quicker recovery
Apple aims to use VR to beat motion sickness in robot cars
SG victims of spoofed work emails suffer losses of over S$70mil, 149 victims in 2022
Victims in SG lose S$466,000 to scammers impersonating ecommerce platform staff
Spotify translating more and more podcasts into multiple languages
Apple announces new accessibility tools for people with disabilities
Communities, Twitter’s take on subreddits, grow after global rollout
Wireless and rechargeable: Captain America saves the Xbox controller
Boeing's Starliner capsule docks with space station in uncrewed flight test
‘Tunic’ for PCs and Xbox: Early ‘Legend Of Zelda’, but with a fox

Others Also Read